Please report security problems privately, not in a public issue. Open the repository's Security tab and choose Report a vulnerability, or go to https://github.com/doqhu/addict/security/advisories/new. Only the maintainer can see the report.

Please include what is affected (the Flatpak, the AppImage or a build from source, and the version), how to reproduce the problem, and what an attacker could do with it.

You will get an answer within a week. Once the problem is confirmed, the fix is released as a new version, and a security advisory credits you unless you prefer otherwise.

Only the latest release receives security fixes. Please check that the problem still exists in it before reporting.