| 版本 / Version | 是否提供安全修复 / Security fixes |
|---|---|
| 2.x（最新版本 / latest release） | 是 / Yes |
| 1.x | 否 / No |
请不要在公开的 Issue、讨论区或交流群里报告安全问题。
请通过 GitHub 的私下报告功能提交：打开仓库的 Security 页面，点"Report a vulnerability"。请写清：
- 受影响的版本与组件（电脑端程序、手机端服务、伴侣应用、ESP32 固件、扩展宿主、本地 MCP 服务等）；
- 复现步骤或概念验证；
- 可能造成的影响。
我们会在 7 天内确认收到，确认问题后尽快修复，并在发布修复版本时致谢报告者（你不希望署名的除外）。
Please do not report security problems in public issues, discussions or chat groups.
Use GitHub's private reporting instead: open the repository's Security page and choose "Report a vulnerability". Please include:
- the affected version and component (the PC app, the phone server, the companion app, the ESP32 firmware, the extension host, the local MCP server and so on);
- steps to reproduce or a proof of concept;
- the possible impact.
We acknowledge reports within 7 days, fix confirmed problems as soon as we can, and credit the reporter in the release that fixes it (unless you prefer not to be named).