Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

If you find a security vulnerability in ComicRow, please report it responsibly:

Do not open a public issue
Email the maintainer or use GitHub's private vulnerability reporting
Include steps to reproduce and potential impact

You should receive a response within 7 days.

Scope

ComicRow is a client application that connects to OPDS servers. Security concerns include:

Credential storage and transmission
Handling of untrusted server responses (XML/JSON parsing)
Local file storage and cache management

Supported Versions

Only the latest version receives security updates.

There aren't any published security advisories