Report a vulnerability privately to contact@askloft.ai, not in a public issue. Include the version (loft --version), what you ran, and what happened. We acknowledge the report and agree a disclosure date with you once a fix is ready.

Security fixes are made to the latest release.