Email security@openmango.app with the affected version, steps to reproduce, and the impact. Please do not open a public issue for security problems.
Fixes ship in the latest release; older versions are not patched.
OpenMango is enrolled in Anthropic's OSS Scanner; its
build and threat model live in .oss-scanner/.