On the one hand, I admire the sentiment behind switching security releases from 'X.Y.Z' version numbers with an incremented Z to 'X.Y.<old-Z>+security-01'. But on the other hand, I sure hope no one was counting on that product having pure semver version numbering because if so, fun times.
Version numbers are hard. (And they aren't numbers, cf https://mastodon.social/@mhoye/113517556045847533 .)