Hermes Mobile is currently under active development and has not reached a production release. Security fixes are applied to the latest commit on the main branch.

Please do not publish API keys, access tokens, session data, device identifiers, private logs, or exploit details in a public issue.

Use GitHub's private vulnerability reporting feature for this repository when available. If private reporting is unavailable, contact the repository owner privately through their GitHub profile before disclosing details publicly.

Include:

• A clear description of the issue and its impact.
• Reproduction steps or a minimal proof of concept.
• Affected files, endpoints, Android versions, and device architecture.
• Any suggested mitigation.

Do not include real credentials or personal data in the report. Use redacted or test-only values.