Security fixes are applied to the latest release and the default branch.

Do not open a public issue for a suspected credential leak, arbitrary code execution path, unsafe checkpoint, or accidental exposure of clinical data. Contact the SenuaLab maintainers privately through the organization security contact or GitHub private vulnerability reporting when available.

Do not include patient data in the report. Use synthetic reproductions and hashes/paths sufficient to identify the affected artifact.

PyTorch .pth files may contain executable pickle payloads. Load them only from the official SenuaLab release and verify the published SHA-256. Prefer the released safetensors files in programmatic workflows.