Please report suspected vulnerabilities privately to the repository owners. Do not include live connection tokens, private keys, relay credentials, or other secrets in a public issue.

Until a stable release exists, only the current main branch receives security fixes. The token wire format and CLI are not yet covered by compatibility guarantees.