Please do not open a public issue. Email zxdubx@gmail.com with what you found, how to reproduce it, and the version or commit you used.

Only the latest version on the default branch gets fixes.

• A write that leaves the driven tab although the config blocks it.
• A file read through upload from outside the upload folder.
• A request to the live view that gets past its Host and Origin checks.
• A tool that runs JavaScript written by the agent.
• A password that reaches the agent or the journal through tree or type.

The limits in Security model and limits are known and are not vulnerabilities on their own.