Security fixes target the latest published three-llm version. Older versions do not receive backports.

Report suspected vulnerabilities privately through GitHub private vulnerability reporting. Include affected versions, reproduction steps, and potential impact. Do not include credentials or private model data. Please avoid public issues for undisclosed vulnerabilities. The maintainer will assess the report and coordinate a fix and disclosure; response times are best effort.