Security fixes are provided for the latest release on the Releases page.

Do not report security issues in public GitHub issues, discussions, or pull requests.

Use GitHub private vulnerability reporting instead:

1. Open the repository Security tab.
2. Choose Report a vulnerability.
3. Submit a private advisory with as much detail as you can.

Include, when possible:

• Affected version(s) and platform(s)
• Steps to reproduce
• Impact assessment
• Proof of concept or exploit code, if available
• Suggested fix or mitigation, if you have one

We aim to acknowledge reports within a few business days. We will coordinate disclosure and credit with you before publishing a fix.

Project home: visorcraft.com