Please do not report vulnerabilities in public issues. Send a private GitHub security advisory to the maintainers.

Only the latest released version receives security fixes. PR Sheriff reads Git diff metadata and local configuration; it must never transmit repository data.