This security policy applies to the ROM Properties Page Shell Extension, also known as rom-properties.

Security and important bug fixes are generally only provided for the latest minor version release. For example, if v2.8 is the current version, then security fixes will be made available as e.g. v2.8.1 and v2.8.2, but updates for the previous v2.7 release will not be provided.

Users are encouraged to use the latest release.

Vulnerabilities can be reported to the repository maintainer on GitHub by selecting the "Security and quality" tab, then clicking the "Report a vulnerability" button.

Alternatively, if you are unable to use GitHub's vulnerability reporting functionality, you can send an email to security@gerbilsoft.com. Please include all information needed to reproduce the vulnerability, including any applicable test case files.