Security updates are provided for the latest published major version.

Use GitHub's private vulnerability reporting feature. Do not open a public issue for a vulnerability that could expose browsing data, bypass browser permission boundaries, execute untrusted content, or corrupt imported libraries.

Include the affected version and browser, reproduction steps, expected impact, and any proposed mitigation. Please do not include real browsing histories, exported libraries, credentials, or other personal data in a report.

The maintainer will acknowledge a reproducible report, assess severity, prepare a private fix when appropriate, and publish accurate release notes after users can update safely.