Open Frontier Labs has not released anything yet: no models, packages or tagged versions. Until a release exists, only the default branch of each repo is supported.

Please do not open a public issue for a security problem.

Use GitHub private vulnerability reporting: open the Security tab of the affected repository and choose Report a vulnerability. If that option is not available on a repo, open a public issue that says only that you have a security report and asks a maintainer to enable private reporting, without including details.

Include what is affected, how to reproduce it, and the impact you see. We will respond in the advisory thread, and credit you when the fix is published unless you prefer otherwise.