Security fixes target the latest published versions of three-ntc and three-ntc-trainer. Older versions are not maintained separately.

Report vulnerabilities privately through GitHub private vulnerability reporting. Do not open a public issue with exploit details. Include affected versions, reproduction steps, impact, and any suggested mitigation. The maintainer will coordinate a fix and disclosure with the reporter; no response deadline is guaranteed.