Please do not file a public issue for suspected security vulnerabilities.

Open a GitHub Security Advisory on XyraSinclair/cardinal-harness. If that is not possible for you, open an issue with minimal details and ask for a private follow-up channel.

Security fixes are provided on the latest release series.