Supported version: 1.0.x. Report vulnerabilities privately through GitHub security advisories; do not open a public issue for an undisclosed vulnerability.

CSV inputs may contain private records. Table Contract Diff reports must never include cell values or modify inputs. Formula execution, path escapes, and value disclosure are security concerns.