Security fixes are applied to the latest source on the default branch and the latest public binary release.

Do not include vulnerability details, private project data, or credentials in a public issue. Use GitHub's private vulnerability reporting from the repository Security tab.

Include the affected component, reproduction steps, impact, and relevant macOS or host versions. Reports about crashes during live use should also state whether a manual recovery control remained available.