Please report vulnerabilities through a private GitHub security advisory. Do not open a public issue for secrets, credential exposure, or a working exploit.

Include the affected Omakade version, the shortest reproduction you can provide, and whether the source launcher is native or Flatpak.