Only the latest released version of the oddyssey package and the oddyssey-mcp PyPI package receives security fixes.

Please do not open a public issue for security problems. Use GitHub's private vulnerability reporting: Report a vulnerability.

You can expect an acknowledgement within a few days. Relevant scope includes the MCP server (oddyssey-mcp, executed via uvx on user machines), the generated marketplace artifacts, and the release pipeline (PyPI trusted publishing).