Security fixes are applied to the latest published NASbook version.

Do not disclose suspected vulnerabilities in a public issue or discussion. Use the repository's Security tab to submit a private report through GitHub Security Advisories.

Include the affected NASbook version, Windows version, reproduction steps, expected and observed behavior, impact, and sanitized logs. Never attach a real notes database, exported private notes, Google OAuth credentials, tokens, or other personal data.

NASbook stores notes in a local SQLite database. Optional Google Drive backup requires user-provided OAuth configuration. Official installers and update metadata are published only through this repository's GitHub Releases.