This is a continuously deployed website — only the latest code on main (what is live at https://cadautoscript.com) is supported. There are no versioned releases to patch.

Please report vulnerabilities privately via GitHub private vulnerability reporting.

Please include steps to reproduce and the affected page or endpoint. You can expect an initial response within 7 days. Accepted reports are fixed directly on main and deployed immediately; you will be credited in the advisory if you wish.

Please do not test against user accounts other than your own, and do not run automated scanners against the payment endpoints.