Do not report security vulnerabilities through public GitHub issues or pull requests.

Use GitHub's private vulnerability-reporting flow:

https://github.com/kody-w/rapp-installer/security/advisories/new

Include the affected platform and version, reproduction steps, expected impact, and a safe proof of concept. Remove credentials, tokens, personal information, private source, and third-party data.

Reports involving installer execution, credential handling, local network exposure, arbitrary code execution, or update integrity should identify the exact file, commit, and platform.