Cache Cleaner deletes files and can run with administrator rights, so security reports are taken seriously.

Only the latest release receives security fixes.

Please do not open a public issue for security problems.

Use GitHub's private reporting instead: go to the Security tab of this repository and choose Report a vulnerability.

Please include:

• a description of the issue and its impact,
• steps to reproduce, including the Windows version and whether the app ran as administrator,
• any proof of concept, if you have one.

You can expect an acknowledgement within a few days. Once a fix is available it will be released and credited in the changelog, unless you prefer to stay anonymous.

Examples of issues in scope:

• deleting files outside the documented cleanup locations (for example through symbolic links or path handling),
• privilege escalation through the administrator relaunch or the elevated helper mode,
• unsafe handling of the temporary result file used during elevation.

Out of scope: files that cannot be deleted because Windows or another program is using them, and behaviour that follows from running the app as administrator on purpose.