Security fixes are made against the latest released Windows version and the current main branch.

Do not report a vulnerability through a public GitHub Issue. After the repository is created, use GitHub's private vulnerability reporting feature from the repository's Security tab.

Include a clear reproduction path, affected version, impact, and any proposed mitigation. Do not attach private recordings, certificates, device credentials, or access tokens.

If private vulnerability reporting is temporarily unavailable, open a minimal public issue that states only that a private security contact is needed. Do not include exploit details.

Please report issues involving local file access, Electron permissions or navigation, media/device permissions, phone-camera pairing and LAN transport, update delivery, or bundled native helpers.