PrefixPug actively supports the latest release milestone. We strongly recommend always running the latest version.

The safety of user data is the primary design requirement of PrefixPug. If you discover a security vulnerability, an unintended file deletion flaw, or a path traversal issue, please report it responsibly.

• Preferred: Submit a confidential advisory report through GitHub Security Advisories.
• Alternative: Send an email directly to bryanvaughan07@gmail.com with the subject [PrefixPug Security] Vulnerability Report.

Please include the following details:

1. Description of the vulnerability and attack vector / data loss scenario.
2. Steps to reproduce or a minimal proof-of-concept test script.
3. System environment (OS, filesystem, Steam version, directory layout).
4. Potential impact.

• We will acknowledge receipt of your vulnerability report within 48 hours.
• We will provide a timeline for triage, validation, and patch release.
• A public security advisory and credit will be coordinated upon releasing the fix.