Until the first stable release, only the latest published public alpha is supported with security fixes.

Use GitHub's private vulnerability reporting feature in the repository's Security tab. Do not file a public issue for a vulnerability that could put users, DAW projects, voicebank data, or local files at risk.

Include the affected version, platform and host, reproduction steps, expected and observed behavior, and whether untrusted USTX, voicebank, model, resampler, or plug-in input is involved. Avoid attaching copyrighted voicebanks or private projects; reduce the report to a synthetic fixture whenever possible.