USBSentry is a small utility; only the latest release receives fixes.

Please do not open a public issue for security problems.

Instead, report it privately using GitHub's private vulnerability reporting: open the repository's Security tab and click Report a vulnerability. If that is unavailable, open a normal issue asking to be contacted privately (without including the sensitive details).

You can expect an acknowledgement within a few days.

USBSentry runs entirely locally, reads device information through Windows' built-in tooling, requires no administrator rights, and makes no network connections, so its attack surface is small. Reports are still appreciated.