Important
Report vulnerabilities privately to the repository maintainers. Do not open a public issue with vulnerability details.
Include the affected versions, reproduction steps, and expected impact. These details help maintainers assess and reproduce the issue.
SDK archive integrity is part of the security boundary. The following areas are treated as security issues:
- Archive verification.
- Extraction path traversal.
- Cache poisoning.
- Runtime staging.