Security fixes are released for the latest published version of Agent Bot.

Do not open a public issue for a suspected vulnerability.

Report it through GitHub private vulnerability reporting. Include the affected version, reproduction steps, impact, and any suggested mitigation.

The project will acknowledge the report, investigate it, and coordinate disclosure and a fixed release when appropriate.