Myriad ships frequently. Security fixes land on preview and go out in the next release; only the latest release is supported. Please upgrade before reporting.

Do not open a public issue, discussion, or Discord/Telegram/QQ message for security problems.

Report privately through GitHub: Report a vulnerability.

Please include:

• the affected version or commit
• steps to reproduce, or a proof of concept
• the impact you believe it has

We will acknowledge your report and keep you updated in the advisory thread until it is resolved. Once a fix is released we publish a GitHub Security Advisory and credit you unless you prefer otherwise.