Security fixes are provided for the newest stable CoolTunnel release.

Do not publish exploitable details, credentials, private site data or proof of concepts in a public GitHub issue.

Report a suspected vulnerability privately to Cool Plugins LLP through the contact method listed at:

https://coolplugins.net/cooltunnel/support/

Include the affected version, impact, reproduction conditions and any safe mitigation. Please allow reasonable time for investigation before public disclosure.

CoolTunnel is intended for temporary development previews, not production hosting or exposure of sensitive administration systems.