Please don't open a public issue for a security problem: the tracker is public, and an issue publishes the way in before a fix exists.
Report it privately instead, through GitHub's
Report a vulnerability
form (the repository's Security tab, then Advisories). Only the
maintainer sees it. Include what you ran, what happened, and the version
(dw --version, or get_server_info over MCP).
Examples of what counts:
- a workflow that runs code or loads a class outside what an untrusted workflow may;
- a path, URL or reference that reads or writes outside the directories the server works in;
- a route or tool that discloses a secret, a server path or whether a file exists;
- a destructive call that runs without its acknowledgement.
Fixes go into the next release. The latest release is the one supported.