Deck Threads processes task titles and project metadata that can be sensitive. Please do not report security or privacy vulnerabilities in a public issue.

Send a private report through GitHub's security advisory form. Include the affected version, reproduction steps, impact, and any suggested mitigation. Remove unrelated private task or workspace content from evidence.

The latest release is the supported version. Reports will be acknowledged as soon as practical, and a public disclosure timeline will be coordinated after a fix is available.