Security fixes are applied to the latest release and the main branch.
Please use GitHub's private vulnerability reporting for this repository. Do not open a public issue containing exploit details, private data or secrets.
Include the affected command or component, reproduction steps, expected impact and any suggested mitigation. Reports will be acknowledged as soon as the maintainer is available; SweetGold is an independently maintained open-source project and does not promise a commercial response SLA.