Please report suspected vulnerabilities privately through GitHub's private vulnerability reporting for this repository when it is available. Do not include credentials, exploit payloads, or other sensitive details in a public issue.
If private reporting is unavailable, open a minimal public issue asking the maintainers for a private reporting channel, without disclosing sensitive details.
Security fixes are considered for the latest release and the main branch. Users should keep ContextPilot and its dependencies up to date.