Please do not report security vulnerabilities in public issues, discussions, or pull requests.

Report them privately in one of these ways:

• Email security@browserbase.com. You can encrypt your report with our PGP key.
• Use GitHub's private vulnerability reporting.

Please include the affected package and version, steps to reproduce, and the impact you observed.

We fix security issues in the latest release of each published package: @browserbasehq/stagehand on npm, stagehand on PyPI, the Go module, and the browse CLI.