# Security Policy

## Supported versions

Security fixes are provided for the latest GitHub Release and the current default branch.

## Reporting a vulnerability

Please use the repository's **Security → Report a vulnerability** form to submit a private GitHub Security Advisory. Include:

- the affected version and operating system;
- clear reproduction steps or a minimal proof of concept;
- the expected and observed behavior;
- any known impact on credentials, local files, or downloaded content.

Do not include access tokens, refresh tokens, passwords, or personal game data. Please avoid opening a public issue until a fix is available.