# Security

DuneBoard is currently a local-first planning tool and does not yet process
untrusted remote input by default.

## Reporting

If you find a security issue, do not post exploit details in a public issue.
Use GitHub private vulnerability reporting if it is enabled for the repository.
If it is not enabled yet, contact the maintainer through the GitHub profile and
share only the minimum information needed to coordinate a private report.

## Supported Versions

No stable release exists yet. Security fixes apply to `main` until versioned
releases begin.

