Only the latest release available on the Releases page is supported with security updates.

Please report security issues privately:

1. Go to the Security tab of this repository.
2. Click Report a vulnerability (private vulnerability reporting).
3. Describe the issue, impact, and steps to reproduce.

Do not open a public issue for anything you believe is exploitable.

For issues that cannot use GitHub Security Advisories, email security@neohiro.io (PGP key on request). All reports get an acknowledgement within 72 hours.

You can expect an initial response within 7 days. Please allow a reasonable time for a fix before any public disclosure.

This tool interacts with local client files. Reports about unintended file access are most relevant.

Maintained by neohiro.