Security fixes are applied to the latest version published in GitHub Releases.

Please report suspected vulnerabilities privately through a GitHub Security Advisory. Do not open a public issue for an undisclosed security problem.

Include the affected version, reproduction steps, impact, and any suggested mitigation. Please redact credentials, cookies, account identifiers, screenshots containing private data, and other sensitive information.

This project does not operate a telemetry or remote reporting backend, so extension runtime data is not automatically submitted with a report.