Only the latest commit on main of each Fiskwise repository (fiskwise, BAIT, wise-writing, wise-presentations, index-wise, spict-wise, gadget-wise) receives fixes.
Report privately through GitHub's Security → Report a vulnerability form (private security advisory) on the affected repository. Do not open a public issue. Include the affected file, the steps to reproduce, and the impact.
If restricted or sensitive Biotic data may have been exposed (for example committed to Git, shared, or sent to an AI provider), that is a data-handling incident, not a software vulnerability. Follow your institute's data-protection procedure and see BAIT's biotic-privacy skill. Do not paste the data into a public issue or advisory.