XCI is currently in early development. Security fixes are provided only for the latest release.
Please email security reports to hello@moee.dev with "XCI Security" in the subject line. Include enough detail to reproduce the issue and a clear impact description.
We will acknowledge receipt within 7 days and work on a fix as soon as possible.