Security fixes are provided for the latest released version of Preflight.

Do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting for this repository. Include reproduction steps, affected versions, and impact.

Preflight does not read file contents for findings, access the network, send telemetry, or modify repositories. Reports concerning those trust boundaries are especially useful.