Please don't open a public issue. Report it privately instead: Report a vulnerability

Include what you found, how to reproduce it, and which version of Plots you're running (Settings › About). You'll get a reply as soon as possible, and a fix goes out as a normal release, which Plots offers through its built-in update check.

Only the latest release gets fixes. Plots updates itself, so staying current is one click.

Every release is scanned with govulncheck and CodeQL before it's published. See docs/SECURITY-FLOW.md.