Security fixes are provided for the latest published MI Drums release. Pre-release development snapshots are supported on a best-effort basis.

Do not disclose a suspected vulnerability in a public issue before maintainers have had an opportunity to investigate and coordinate a fix.

Use the repository's Security tab and Report a vulnerability option (GitHub Private Vulnerability Reporting) when available. Include affected version, impact, reproduction details, and any suggested mitigation. Do not include unrelated personal data or credentials.

No dedicated security email address is currently published. If private vulnerability reporting is not enabled, open a public issue containing only a request for a private security contact; do not include exploit details in that issue.

Ordinary crashes, MIDI compatibility problems, and usage questions that have no security impact belong in the normal issue tracker.