# Security

Security fixes are maintained for the current BentoDesk 2.x release line. The archived 1.x Tauri line is kept for history and migration reference.

Please do not open a public issue for a vulnerability. Use GitHub's private report form:

<https://github.com/ZRainbow1275/bentodesk/security/advisories/new>

Include the affected version, a minimal reproduction, impact, and any suggested mitigation. Remove passwords, tokens, personal files, and machine-local paths before submitting evidence.

Public bugs that do not expose a security boundary can use the normal issue tracker.