Security fixes target the latest published release of webgpu-bench and webgpu-bench-core. Older releases are not maintained; upgrade to the latest version.

Report suspected vulnerabilities privately through GitHub private vulnerability reporting. If private reporting is unavailable, contact the maintainer through ben3d.ca and request a private reporting channel before sharing details. Do not disclose exploit details in a public issue.

Include affected versions, reproduction steps, potential impact, and any suggested mitigation. We will assess the report and coordinate disclosure and a fix with the reporter; no response-time guarantee is offered.