This project is a source-only preview with no binary releases. Security fixes target the current main branch.

Please report vulnerabilities privately through GitHub's private vulnerability reporting flow. Do not disclose unpatched vulnerabilities in a public issue.

Include:

• a concise description and impact
• the affected commit
• minimal reproduction steps
• a proposed fix, if known

Do not include real Codex session files, prompts, responses, commands, tool output, credentials, usernames, home-directory paths, or personal pet artwork. Use synthetic fixtures and redact screenshots.

Please allow time to validate and fix a report before public disclosure. The maintainer will acknowledge reports when possible, but this volunteer project does not promise a response-time SLA.

For ordinary bugs and feature requests, use the public issue forms.