Security fixes are provided for the latest released version of jjui.

Please report suspected vulnerabilities privately to ibrahim@dursun.cc. Do not open a public issue until we have agreed on a disclosure plan.

Include the affected jjui version, reproduction steps, impact, and any relevant logs or proof of concept.

As this is a primarily solo-maintained project, I aim to acknowledge reports within 14 days and will keep you informed of progress. I will coordinate a fix and public disclosure with you when appropriate.

This policy covers the jjui source code and official release artifacts.

Community-maintained package repositories and distributions, including Nix and Homebrew, are outside this policy's maintenance scope. Please report packaging issues to the relevant package repository maintainers.

For vulnerabilities in third-party dependencies, please also report them to their upstream maintainers.