Deckloud stores your Nextcloud login and syncs your boards, so security problems matter a lot. Thank you for reporting them privately.

Report it privately here. Only you and the Deckloud maintainer can see the report. Without a GitHub account, email support@deckloud.com instead.

Please do not open a public issue for a security problem. Other people could misuse it before a fix ships.

A helpful report includes:

• the Deckloud version and platform
• what an attacker could do, and what they would need first
• the steps to reproduce it

Once a fix ships, the report can be published, with credit to you if you want it.

Report anything that could expose your Nextcloud login, app password, board data, or Pro licence, or let someone act as you. This covers the Deckloud apps for iPhone, iPad, Mac, Windows, and Linux, and the Deckloud Cloud service.

Problems in Nextcloud or the Deck app itself belong to the Nextcloud security program.

Fixes ship in the latest release. Please update to it before you report.