Security fixes are applied to the current main branch and the latest private build. Older builds may be asked to update before a report is investigated.

Use the repository's Security tab to open a private security advisory. If that is unavailable, contact the repository owner privately before sharing details elsewhere.

Please include:

• the affected commit or build version;
• reproduction steps or a minimal proof of concept;
• the expected security impact and required preconditions;
• relevant logs with paths, credentials, and personal data removed.

Do not attach game archives, extracted game assets, access tokens, encryption keys, or other data you do not have permission to share.

Reports involving archive parsing, path handling, export destinations, native process boundaries, cache integrity, or packaged dependency provenance are especially useful. The maintainer will confirm the report, reproduce it where possible, and coordinate remediation before disclosure.