Security fixes are generally applied to the latest version on the main branch. Older releases may not receive fixes.

Please do not report security vulnerabilities in a public issue, discussion, pull request, or chat message.

Use GitHub’s private vulnerability reporting flow for this repository:

1. Open the repository’s Security tab.
2. Select Report a vulnerability or Report a security vulnerability.
3. Include the affected version, device/Android version where relevant, reproduction steps, impact, and a safe proof of concept if available.

If private reporting is not enabled, contact the repository maintainers privately through GitHub and ask for a secure channel.

Please allow maintainers reasonable time to investigate and prepare a fix before making the issue public. Do not include real user data, credentials, signing keys, or other secrets in a report.

• A concise description of the vulnerability.
• The affected component or file, if known.
• Exact reproduction steps.
• The potential impact, especially if it affects blocking, permissions, passwords, or emergency-access behavior.
• Any suggested mitigation.