Please report security issues privately through GitHub's private vulnerability reporting, not in public issues. We'll reply within a few days.

This covers the kvpack serve server and kvpack Studio (studio/). Cartridges are .safetensors files and are loaded without executing code.