Security fixes are provided for the latest released version and the current default branch. Older versions may no longer receive security updates.
Please do not report security vulnerabilities through public GitHub issues.
Use the repository's private vulnerability reporting feature:
Security and quality → Advisories → Report a vulnerability
Please include:
- A description of the vulnerability
- Affected version or commit
- Device model and Android version, if relevant
- Steps to reproduce
- Potential security impact
- Relevant logs, screenshots, or proof of concept
Please avoid including real API keys, credentials, personal data, or other sensitive information in the report.