Only the latest release receives active updates. The previous minor version receives critical security fixes for 30 days after the new release.

• Vulnerabilities in scripts or documentation that could compromise a user's device or accounts
• Dependencies with known security issues
• Supply chain integrity concerns

Report security vulnerabilities through GitHub's private vulnerability reporting at https://github.com/ferrumclaudepilgrim/claude-code-android/security/advisories/new.

Do not open a public issue for security bugs.