Only the latest release of gbat receives security fixes.

Report vulnerabilities privately through GitHub private vulnerability reporting. Do not open a public issue.

Include the affected version, steps to reproduce, and the impact you observed.