Security fixes are provided for the latest published release.

Please report vulnerabilities privately through GitHub Security Advisories. Do not disclose a suspected vulnerability in a public issue before a fix is available.

Include the affected version, phone and glasses Android versions, reproduction steps, impact, and relevant sanitized logs. Do not include USB serials, signing material, credentials, private media, or captured screen content.

The project will acknowledge reports on a best-effort basis. No response or remediation SLA is promised.