Supported: master (STIOC 0.4.x).

Report vulnerabilities via GitHub Security Advisories or email to repo owner. Do not file public issues for PT Y exec, openExternal, CSP bypass.

Fixed in 0.4.5: PTY.executeCommand shellEscape, openExternal allowlist, CSP meta, sandbox notes.