Security fixes are provided only for the latest stable release line.

If you find a security issue, please report it privately.

• Open a Private vulnerability report in this repository’s Security tab.
• Include:
  • affected version (About screen + build number)
  • device/OS details
  • clear reproduction steps
  • logs/screenshots if available
  • impact (what an attacker can do)

• Initial acknowledgement: within 72 hours
• Triage/update: within 7 days
• Fix timeline: depends on severity and reproducibility

• Please do not open a public issue for security vulnerabilities.
• After a fix is released, details may be disclosed in release notes/changelog.