Security fixes are provided for the latest released version of wco.

Do not disclose a suspected vulnerability in a public issue.

Use GitHub's private vulnerability reporting feature from the repository's Security tab. If private reporting is unavailable, open a public issue without sensitive details and ask the maintainers for a private contact channel.

Include the affected version, operating system, reproduction steps, impact, and any suggested remediation. Maintainers will acknowledge a complete report as soon as practical and coordinate disclosure after a fix is available.