Security fixes target the current main branch.

Please do not open a public issue for a suspected vulnerability involving authentication, progress integrity, or data exposure. Use GitHub's Report a vulnerability flow on this repository instead. Include reproduction steps, affected routes, and the expected impact. Reports will be acknowledged as soon as practical.

The repository contains no production credentials or user data. Access to the deployed ChatGPT Sites project and its D1 database is controlled separately from GitHub.