Use GitHub private vulnerability reporting for sensitive issues. Do not publish credentials, private media, or exploit details that expose other users' data in a public issue.

Include the source commit or app version, platform version, reproduction steps, and a synthetic sample where possible. Archive path validation, resource limits, integrity checks, and interrupted Photos writes are particularly relevant areas.

This is an actively developed project. Security fixes target the latest development source; this document does not promise a response deadline or ongoing support for historical builds.