Only the latest published Ardor Desktop version receives security updates.
Use GitHub's Security → Report a vulnerability flow to report security issues privately. Do not open a public issue or pull request with exploit details, credentials, or customer data.
Include the affected version and platform, reproduction steps, expected impact, and any suggested mitigation. Ardor will acknowledge the report through the private advisory and coordinate disclosure after a fix is available.