Only the latest released version receives security fixes while the project is pre-1.0.

Please do not open a public issue for security problems.

Instead, use GitHub's private reporting: Security → Report a vulnerability on the repository, or open a private security advisory.

Include:

• A description of the issue and its impact.
• Steps to reproduce (or a proof of concept).
• The app version and OS.

You can expect an initial response within a reasonable time frame. Thanks for helping keep HorseMD and its users safe.