Please report security vulnerabilities privately using GitHub's Report a vulnerability feature on the repository's Security tab. Do not disclose suspected vulnerabilities in public issues or discussions.

Include the affected ecsctl version, operating system, steps to reproduce, and the potential impact. We will review reports and coordinate any fix and public disclosure with the reporter.

Security fixes are made for the latest release. Upgrade to the latest version before reporting when possible; older releases may not receive security fixes.