Fixes for vulnerabilities appear in the release notes. Upgrade when a new release is published. For upgrade steps, see the upgrade guide.
To get update warnings in the CLI, use an official release binary from the GitHub releases page. The CLI prints the warnings in terminal output when you run a command.
See the install instructions for each platform. Third-party binaries may not include the version number, so the CLI cannot check for updates.
Report vulnerabilities to dev@devsy.sh.