Cron Manager is designed to run locally only — it has no authentication and is not intended to be exposed to the internet or a shared network. Running it on a publicly accessible host is out of scope and explicitly unsupported.

Only the latest release on main receives security fixes.

Please do not open a public GitHub issue for security vulnerabilities.

Instead, report vulnerabilities privately via GitHub's private vulnerability reporting or by emailing the maintainer directly (see the GitHub profile).

Include:

• A description of the vulnerability
• Steps to reproduce
• Potential impact
• Any suggested mitigations (optional)

You will receive a response within 7 days. If the issue is confirmed, a fix will be released as soon as practical and credited to you (unless you prefer to remain anonymous).