Security fixes go into the latest release of the plugin app and the latest release of r9cam_models. Older releases do not get backported fixes, so upgrade to the latest release to pick them up.

Please do not open a public issue for a security problem. Report it privately through GitHub's "Report a vulnerability" form:

https://github.com/CMLPlatform/r9cam/security/advisories/new

Include the affected version, what you found, and the steps to reproduce it if you can.

We aim to acknowledge your report within a few working days, keep you updated while we investigate, and credit you in the advisory when the fix is released unless you prefer otherwise.