Only the latest tagged release is supported. Security fixes are not backported to older releases.

Report suspected vulnerabilities privately using GitHub's Security Advisory feature for this repository (Security > Advisories > Report a vulnerability). Do not open a public issue for a suspected vulnerability.

Include:

• Affected version (the plugin's VersionName, or the vendored core commit from Source/ThirdParty/SuperFAISS/VENDORED_VERSION.txt).
• Steps to reproduce, and the impact you assess.

You will get an acknowledgement within a reasonable time, and a fix or a mitigation plan once the report is triaged.