Security fixes are provided for the latest released version of agent-device.

Please report vulnerabilities privately through GitHub Security Advisories. Do not open a public issue or pull request for an undisclosed vulnerability.

Include the affected version, impact, reproduction steps, and any suggested fix. Never include real credentials or personal data; use clearly fake values in examples.

We aim to acknowledge reports within three business days and provide a status update within seven days. We will confirm whether the report is accepted or declined and coordinate any fix and public disclosure with the reporter.