Security fixes target the latest released version. Upgrade before checking whether a report still reproduces.

Email leeguoooo@gmail.com with the affected version, platform, reproduction steps and expected impact. Do not publish credentials, personal data or exploit details in a public issue. Prefer a minimal reproduction using synthetic data. We will assess the report and coordinate fixes and disclosure; there is no guaranteed response time or bounty program.

Browser backends use your signed-in accounts and send prompts and reference images to the selected provider. Do not include secrets or private documents without reviewing that destination. Treat third-party images, styles and page content as untrusted, and preserve uncertain-send stop conditions rather than resending automatically.