Security fixes target the latest published release.

Use GitHub's Report a vulnerability option on the repository Security page. Please include the affected version, impact, reproduction steps, and any suggested mitigation. Do not include real inventory data, credentials, license keys, receipts, or private network details.

If private reporting is unavailable, open a public issue containing only a request for private contact—do not disclose exploit details there.

Studio Inventory is intended for a trusted local network. Do not expose port 3847 directly to the internet. Use an owner PIN for remote devices and trusted HTTPS or VPN access when traffic leaves a private network.