Security fixes are applied to the latest tagged release.

Use GitHub's private vulnerability reporting feature for the repository. Do not open a public issue for a vulnerability that could expose user data, execute unexpected code, or modify an IDA installation outside the selected plugins directory.

Include the affected version, IDA version, operating system, reproduction steps, and the smallest practical diagnostic log. Remove database contents, licensed binaries, credentials, user paths, and private reverse-engineering targets before attaching files.