Screen Mask is pre-1.0. Security fixes land on the latest release only.

Please report suspected vulnerabilities privately rather than opening a public issue. Use GitHub's private vulnerability reporting for this repository.

Include as much as you can:

• What the issue is and how it can be triggered
• The Windows version and setup you observed it on
• Any proof-of-concept steps

You can expect an acknowledgement within a few days. Once a fix is ready, it will ship in a tagged release and the advisory will be published with credit to the reporter, unless you prefer to stay anonymous.

Screen Mask creates layered, top-most overlay windows and can make them click-through. That is the intended behavior. Reports about the tool covering the screen or passing clicks through are working as designed, not vulnerabilities.