Report vulnerabilities privately via GitHub's "Report a vulnerability" (Security tab → Advisories). Don't open a public issue.

Only the latest release is supported.

• What is affected (workflow, script, or file) and the version or commit.
• Steps to reproduce, or a proof of concept.
• The impact you expect.

This is a personal project. Reports are handled on a best-effort basis, with no guaranteed response time.