Security fixes are applied to the latest released version. Upgrade to the newest tag before reporting behavior that may already have been corrected.

Do not open a public issue containing credentials, exploit details, or private deployment information. Use GitHub's Report a vulnerability option under the repository Security tab. If private reporting is unavailable, contact the repository owner through the GitHub profile before sharing sensitive details.

Include the LiteGate version, deployment method, affected endpoint, impact, and the minimum reproduction needed to verify the problem. Never include a working LiteLLM master key, management key, OIDC secret, session token, or virtual key.