Only the latest released version of SIMAI Framework for VS Code receives security fixes.

Please do not open a public issue. Report the vulnerability privately through GitHub security advisories. Include the extension version, the VS Code version, and steps or a file that reproduces the problem.

We aim to acknowledge a report within five working days and to agree on a fix and disclosure date with you.

The extension runs locally in VS Code. It does not download anything at runtime, does not send data over the network and reads only the files you open and its own bundled data. Problems in SIMAI Framework itself belong to simai/ui-source.