Latest major version of commitizen is being supported with security updates.

If you have found a security issue in commitizen, please create a new issue in the GitHub repository.

Please note that commitizen, as a CLI tool, executes arbitrary commands and scripts from its configuration file by design. This is intended behavior.