Security fixes are made against the latest release and the main branch. Before reporting a problem, please confirm it is still present in the latest release when practical.

Do not report suspected vulnerabilities in a public GitHub issue.

Use GitHub private vulnerability reporting to send the maintainers:

• The affected Zentty version or commit.
• The macOS version used for testing.
• Reproduction steps or a minimal proof of concept.
• The expected security impact.
• Any suggested remediation, if available.

If the private reporting form is unavailable, contact the repository owner through their GitHub profile and ask for a confidential reporting channel without including vulnerability details in the initial message.