Please do not open a public issue for a vulnerability that could expose local game data, saves, credentials, signing material, or device information.

Instead, contact the repository owner privately through the email address on the GitHub profile with a concise report, affected commit or release, steps to reproduce, and potential impact. Do not include ROMs, saves, certificates, private keys, or other sensitive files in the report.

The project will acknowledge reports, assess the affected release path, and coordinate public disclosure after a fix is available where practical.