BookshelfNG 0.4.21.71 was the previous public release. The owner authorized one final security-maintenance release, 0.4.21.72; after its publication, further stable releases remain frozen until migration and retirement acceptance is complete. Issue #144 is closed, but its acceptance gates remain open. Keep the existing service running until the migration path is accepted; do not point ChaptarrNG at its appdata or switch an installation based on an unpublished candidate. See the current retirement status before any cutover. Vulnerabilities affecting the maintained destination should also be reported through the ChaptarrNG security policy.

Report suspected vulnerabilities through GitHub's private vulnerability reporting for this repository. If that feature is unavailable, contact a repository maintainer privately through GitHub before public disclosure. Include the affected version, deployment type, steps to reproduce, and impact. Do not include live API keys, passwords, cookies, or unredacted logs in a public issue.

BookshelfNG API keys grant access to the API. Use the restricted BOOKSHELF_SEERRNG_API_KEY for SeerrNG when possible, keep credentials in a secret manager, and rotate exposed values. Configure trusted proxy addresses before relying on forwarded client IP or HTTPS headers.