Security fixes are provided for the latest stable release of GeniaFirewall. Older builds and development snapshots are unsupported.

Please do not disclose a suspected vulnerability in a public issue, discussion, or pull request.

Use GitHub's private vulnerability reporting for this repository: open the Security tab, choose Advisories, and select Report a vulnerability. Include the affected version, Windows version, reproduction steps, impact, and any suggested mitigation. Avoid attaching real credentials, personal data, or unrelated system logs.

You should receive an acknowledgement through the advisory within seven days. Public disclosure should wait until a fix or mitigation is available and coordinated through the advisory.

Reports involving WFP policy bypass, privilege boundaries, named-pipe authorization, service installation or update, persistence, unsafe file permissions, or unintended information disclosure are especially valuable.