PROS processes potentially untrusted PDF files through its pinned PDF and image libraries. Keep PROS and its dependencies current and inspect important output files before relying on them.

Please do not disclose a suspected vulnerability in a public issue. Use the private vulnerability report on the PROS repository and include the PROS version, Windows version, reproduction steps, and a minimal non-confidential sample where possible.

Security fixes are made against the latest supported release. Older builds may not receive separate patches.