Use GitHub's private security advisory form. Do not open a public issue or Discussion for a vulnerability.

Include affected versions, reproduction steps, impact, and any suggested mitigation. Maintainers will acknowledge the report through the private advisory and coordinate remediation and disclosure there. No paid bug bounty is currently offered.

The static editor processes source images and generated ICNS bytes in browser memory. It does not contain upload code and does not require a backend.

The optional Session Worker stores metadata only:

• a 64-character random hexadecimal Session ID;
• a SHA-256 hash of a 128-character random hexadecimal secret;
• timestamps, source-format hint, state, output byte length, and representation count, plus a non-sensitive error code for failed conversions.

The plaintext secret is carried in the editor URL fragment. URL fragments are not sent to the web host, Worker, or referrer targets. State-changing Worker requests send the secret in a JSON body over HTTPS. Session records expire after 30 minutes, and terminal records are deleted after 24 hours.

Session state in a URL query is removed from browser history and rejected. A query reaches the web host before client code can clean it, so it is never an accepted compatibility path for a Session secret.

The editor accepts Session callbacks only when its trusted deployment config.js defines the exact Worker origin. A link-provided Worker origin must match that configuration, and Session IDs and secrets must match their fixed lowercase hexadecimal formats before any request URL is built. The public Tinkora editor leaves Session callbacks disabled.

• Source-image or generated-file disclosure
• Image parser memory-safety or denial-of-service issues
• ICNS output validation bypasses
• Session secret disclosure, prediction, or authorization bypass
• Worker input validation, D1 injection, or rate-limit bypass
• MCP JSON-RPC boundary or Worker URL handling vulnerabilities
• Dependency and GitHub Actions supply-chain vulnerabilities

Reports about an independently operated Worker should identify whether the issue is in this repository or in the operator's deployment configuration.