Security fixes target the latest stable ShareDing release. Older releases and prereleases may not receive fixes.

Use Report a vulnerability on the repository's security page to send a private report. Include the affected app version, the impact, and steps to reproduce. Share proof of concept material there rather than in a public issue.

If private reporting is unavailable, open an issue asking for a private contact channel. Do not include vulnerability details in that issue.

We will investigate reports and use a GitHub Security Advisory to coordinate fixes and disclosure for confirmed vulnerabilities.