Report a vulnerability by email to security@xete.net or contact@xete.net. Please do not report it publicly. Include the version (kb --version), the platform, and the smallest steps that show the problem.

What has been reviewed, how, and what has not been, is in the README section "Security review and its limits". The software is provided as is, without warranty, under the MIT license in LICENSE.