Security fixes are applied to the latest release on the main branch.

Please do not open a public issue for a suspected vulnerability. Report it privately to the repository owner through GitHub's private vulnerability reporting feature when enabled, or contact FateLightX through the GitHub profile. Include reproduction steps, affected version, and impact.

AriaFlow stores its local RPC secret under the current user's Application Support directory. Do not include that secret, download URLs with credentials, or private logs in a report.