Security fixes go into the latest release on main.
Please do not report a vulnerability in a public issue. Use GitHub's private reporting: https://github.com/nrzz/claude-code-toolkit/security/advisories/new, or the contact in the nrzz security policy. You can expect a first answer within 72 hours, and credit in the release notes if you want it.
This repository holds no tool code: report a problem in a tool to that tool's repository. Report a marketplace entry that points somewhere it should not, or a problem with the website, here.