WinWork is actively developed. Security fixes are applied to the latest released version. Please make sure you are running the most recent release before reporting an issue.

Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately using GitHub's private vulnerability reporting:

1. Go to the Security tab of this repository.
2. Click Report a vulnerability.
3. Provide a clear description, reproduction steps, affected version, and potential impact.

We will acknowledge your report, investigate, and keep you updated on progress and remediation. Please give us a reasonable amount of time to address the issue before any public disclosure.

• WinWork stores its data locally in a SQLite database under the user's %APPDATA%\WinWork folder.
• API keys and credentials are stored in the Windows Credential Manager, not in the database or source code.
• When reporting issues, please do not include real secrets, tokens, or passwords in your report or any attached logs.