OpenRend actively maintains and releases security patches for the following versions:

We take the security and integrity of OpenRend seriously. If you discover a vulnerability, especially regarding media decoding, memory safety in the native C++20 engine, or project deserialization:

1. Do not disclose the issue publicly in a public GitHub issue, discussion, or social media.
2. Report the vulnerability privately via GitHub Private Vulnerability Reporting.
3. Include detailed steps to reproduce the issue, sample media files (synthetic/test media only), and stack traces if applicable.

We will acknowledge receipt within 48 hours and work with you to test and deploy a fix before public disclosure.