Security fixes are provided for the latest stable release. Please upgrade to that release before checking whether a reported issue still applies. Once Textual 8 is released, this table will be updated.

Please report suspected vulnerabilities privately through GitHub's vulnerability reporting form. If the form is unavailable, email security@blendbyte.com and ask for a private channel before sending sensitive details.

Include the affected version, your macOS version, steps to reproduce the issue, and its potential impact. A minimal proof of concept is helpful, for example a crafted server message or link that triggers the problem. Please remove passwords, server credentials, personal data, and any information belonging to other users.

Please avoid public issues, discussions, or pull requests that disclose a vulnerability before a fix is available. We will review reports, discuss any additional information needed, and coordinate disclosure and a fix with the reporter. Response and fix times depend on the severity and complexity of the issue.