ScreenX uses macOS Accessibility permission to move and resize windows. Security reports that affect permission handling, update checks, packaging, or local data storage are taken seriously.
Security fixes are handled on the default branch first. Public releases should be updated from the latest tagged or published build.
Please do not open a public issue for a vulnerability or for a report that includes private paths, credentials, tokens, or personal data.
Use GitHub's private vulnerability reporting or contact the maintainer through the SyntaxFear GitHub profile. Include:
- What you found
- Steps to reproduce it
- The macOS version and ScreenX version
- Any logs or screenshots with personal data removed
The maintainer will confirm receipt, investigate, and coordinate a fix before public disclosure.