Do not disclose vulnerabilities through a public issue. Email security@codevelo.dev with a description, reproduction steps, impact, and any suggested remediation. CodeVelo will acknowledge the report and coordinate disclosure privately.

Only the latest release line is supported with security updates.