Only the latest released version of claude-task-worker (the most recent version published on npm) is supported with security updates. Please make sure you are running the latest version before reporting an issue.
| Version | Supported |
|---|---|
| Latest | ✅ |
| Older | ❌ |
If you believe you have found a security vulnerability in this repository, please report it privately using GitHub's Private Vulnerability Reporting feature:
- Go to the Security tab of this repository.
- Click "Report a vulnerability" to open a new draft Security Advisory.
- Fill in as much detail as you can, including steps to reproduce, affected versions, and potential impact.
Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.
- We will acknowledge receipt of your report as soon as possible.
- We will investigate and keep you updated on the progress toward a fix.
- Once a fix is available, we will coordinate disclosure with you and credit you (unless you prefer to remain anonymous).
This policy covers the claude-task-worker CLI (this repository) and the Claude Code plugin bundled under plugin/. Vulnerabilities in third-party dependencies should generally be reported upstream, but feel free to let us know if they affect this project so we can update accordingly.