One Man Labs supports the current main branch.

Use the private security-advisory function in this GitHub repository. Do not create a public issue for a vulnerability.

Include the affected commit, the reproduction steps, the expected result, and the actual result.

Do not attach a private model, data set, image, password, or access token.

CVD is a local development tool. It does not provide user authentication. Do not expose it directly to an untrusted network.