Please report suspected vulnerabilities privately through GitHub's Security advisories page for this repository. Do not open a public issue containing exploit details, credentials, server names, database names, backup paths, or customer logs.

Before reporting a functional problem, rerun with -CheckOnly and redact all machine, instance, database, user, and filesystem names from any output.

The script intentionally accepts only Microsoft-signed SQL Server 2022 update packages with the expected filename pattern. Do not disable the signature, HTTPS-host, selected-instance, sysadmin, or backup-verification checks.