Security fixes target the latest stable iconctl release. Upgrade before reporting a problem that may already be resolved.

Report suspected vulnerabilities privately at https://github.com/icelib/iconctl/security/advisories/new. Include the affected version, environment, impact and reproduction steps. Do not include real tokens or private Figma content in public issues.

Reports involving icon ingestion, filesystem access, generated SVG/HTML, credential handling, console authentication, executor isolation and publishing are in scope. Report third-party vulnerabilities upstream as appropriate.