Please do not open a public issue for a vulnerability. Report it privately through GitHub security advisories.

Only the latest release is supported. The canvas listens on 127.0.0.1 only and requires a per-process token for every change; reports about bypassing it, path traversal through sourceDescriptions, or script injection through document content are especially welcome.