Only the latest release on the main branch receives security fixes.

Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately using GitHub's private vulnerability reporting, or by email to ask.nilan@gmail.com.

Please include:

• A description of the issue and its impact
• Steps to reproduce, or a proof of concept
• The affected version or commit, and your TV model/webOS version if relevant

You should get an acknowledgement within a few days. We'll keep you updated on the fix and credit you in the release notes unless you'd prefer to stay anonymous.

Please don't include real provider credentials or playlist URLs in your report.