Please do not disclose a vulnerability in a public issue. Use the repository's private Report a vulnerability option (GitHub Security Advisories). Include the affected commit, a minimal EPUB or reproduction steps, and impact details.

Only the latest revision on the main branch is supported until versioned releases begin. This project processes untrusted EPUB/ZIP input, so path traversal, memory exhaustion and malformed-container reports are especially welcome. No response-time guarantee is currently offered by this volunteer project.