Only the latest release receives security fixes.

Report vulnerabilities through GitHub private vulnerability reporting. Do not open a public issue until a fix and disclosure plan are ready.

Never include real Apple identity tokens, private keys, authorization codes, or client secrets in a report.