Winderust is currently pre-release. All security flaws will be apply and fix to the latest code on the main branch.

Please use GitHub private vulnerability reporting in the repository Security tab. Do not publish vulnerability details in a public issue.

If private reporting is unavailable, open an issue requesting a private contact channel without including exploit details.

Include the affected version, Windows version, reproduction steps, impact, and whether administrator access is required. Reports involving unsafe power-plan changes, protected processes, privilege boundaries, or failure to restore managed process state are especially useful.

You should receive an acknowledgement within seven days. Fix timing and disclosure will depend on severity and reproducibility.