Security fixes are applied to the latest released minor version.

Please do not open a public issue for a suspected vulnerability.

Use GitHub's Report a vulnerability flow in the repository's Security tab. Include the affected command or script, reproduction steps, impact, and any suggested mitigation. Remove API keys, private captured content, and other secrets from the report.

You should receive an acknowledgement within seven days. We will validate the report, coordinate a fix and disclosure timeline, and credit you if requested.