Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
5.x-1.6 contained a stupid last-minute, not-enough-testing mistake which even opened security holes if you allow users to specify the alt attribute of an image in a node. See SA-2008-008 - Meta tags - Arbitrary code execution for the advisory.