Please use GitHub private vulnerability reporting. Do not open a public issue for a suspected vulnerability.

Include only the minimum information needed to reproduce the problem. Never attach Codex credentials, raw account responses, local application state, or screenshots containing private usage data.

Security fixes are applied to the current main branch. This project does not currently publish supported binary releases.