Only the latest version of Stasher receives security updates.

Do not open a public GitHub issue for security vulnerabilities.

If you discover a vulnerability, please:

1. Email the maintainer directly at .
2. Include a description of the vulnerability, steps to reproduce, and the potential impact.
3. Allow reasonable time for a response (typically within 72 hours) before any public disclosure.

You will receive confirmation that your report has been received, and updates as the issue is investigated and resolved.

The following are not considered security vulnerabilities for this project:

• Vulnerabilities in dependencies that do not affect Stasher's surface area.
• Issues that require physical access to the system.
• Social engineering attacks.