Security fixes are provided for the latest GitHub release.

Please use GitHub's Private vulnerability reporting feature for this repository. Do not include private note contents, credentials, or other personal data in a public issue.

FloatNote has no network client or telemetry. Security-sensitive areas include local file replacement, startup shortcut creation, command-line handling, and Windows message/input boundaries.