Security fixes are applied to the latest published release.
Use GitHub private vulnerability reporting when available. If it is unavailable, open an issue requesting a private contact channel without including exploit details, private client files, credentials, or proprietary game assets.
ObjectBuilder Studio reads source DAT and SPR files without modifying them in place. Keep independent backups and export changes to a separate directory.