Only the latest release and the current main branch are actively supported with security updates.

If you discover a security vulnerability within Obtainmond (including privileged execution, JNI memory safety, or arbitrary file overwrite vulnerabilities):

1. Do not create a public issue.
2. Report the vulnerability privately via GitHub Private Vulnerability Reporting or by contacting maintainers directly.
3. Provide a clear description, reproduction steps, and proof-of-concept if possible.
4. Maintainers will acknowledge receipt within 48 hours and work with you on a resolution before any public disclosure.