Security fixes are applied to the latest release.

Please use GitHub's private vulnerability reporting for this repository. Do not include secrets, private instruction files, or proprietary source code in a public issue.

The scanner runs locally and makes no network requests. Reports can still contain excerpts from instruction files, so review them before publishing.