Security fixes are applied to the latest released version of DynamicUI.

Please do not open a public issue for a suspected vulnerability. Use GitHub's private vulnerability reporting to share reproduction steps, affected versions, impact, and any suggested mitigation.

You should receive an acknowledgement within seven days. After validation, the maintainer will coordinate a fix and disclosure timeline with the reporter.

Applications remain responsible for authenticating remote payloads, restricting trusted content sources, and validating a layout before rendering it.