Please don't open a public issue. Report it privately through GitHub security advisories. You should get a reply within a week.

Only the latest release gets fixes.

In scope: problems in this library's code, for example leaking prompts or credentials into logs or the cache, or unsafe subprocess handling. Out of scope: vulnerabilities in the Claude Code CLI or in OmniRoute themselves; report those to their maintainers.