Deployment owners are responsible for securing their instances and keeping dependencies up to date.

Please do not open public issues for vulnerabilities or leaked credentials. Use GitHub private vulnerability reporting when it is enabled for this repository. If the form is unavailable, do not post sensitive details publicly. A response or fix is not guaranteed. When sharing logs or configuration, remove API tokens, Worker secrets, session IDs, and private channel or message contents.