Report vulnerabilities privately through SunShot's security page. Include the version, steps to reproduce, and expected behavior. Do not include real screenshots, account credentials, or private settings files.

SunShot is an early beta. Security fixes target the latest SunShot release; upstream ShareX releases are maintained separately.