Report vulnerabilities privately: open the Security tab of the repository and choose "Report a vulnerability". Do not open a public issue.

Please include the glissando version, your device and system, the steps to reproduce the problem, and what an attacker gains.

This matters most for anything that could expose typed text, passwords or personal data, or give the keyboard network access. See docs/PRIVACY.md for what glissando promises.

No response time is promised.

Fixes go to the main branch and ship in the next release. Only the latest release is supported. There are no maintenance branches for older versions.