Security fixes are applied to the latest Fedora 44 COSMIC community release. Older community builds are not supported.

Please do not open a public issue for a vulnerability that could put users at immediate risk. Use GitHub's private vulnerability reporting feature for this repository when available. Include reproduction steps, affected version, Fedora/COSMIC environment, and the smallest safe proof of concept.

For vulnerabilities that also affect upstream DrawPen, follow the upstream project's preferred reporting channel. Do not disclose the issue publicly until maintainers have had a reasonable opportunity to respond.