Security fixes go into the latest release of the @scoutui packages, the web app image and the Helm chart.

Please don't report security vulnerabilities in a public issue, discussion or pull request.

Report them privately through GitHub instead: open the repository's Security tab and choose Report a vulnerability, or go straight to the advisory form.

Include what's affected (the CLI, the web app or the Helm chart), the version, and the steps to reproduce. You'll get an acknowledgement within 7 days. This is a small project, so fixes are best effort.