CodingAgentRunner is pre-1.0. Security fixes are provided for the latest released minor version. Older minor versions are not supported.
| Version | Supported |
|---|---|
| 0.7.x | Yes |
| < 0.7 | No |
Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting flow to send the maintainers a report.
Include the affected version, impact, reproduction steps or a proof of concept, and any known mitigations. The maintainers will acknowledge the report through the advisory and use that private thread for follow-up and disclosure coordination.