Security fixes are supported on the latest commit of the main branch.

Do not report vulnerabilities in a public issue. Use GitHub's private vulnerability reporting feature for this repository. If that feature is not available, contact the maintainer privately through the address listed on their GitHub profile.

Include reproduction steps, affected versions, impact, and any suggested mitigation. Please allow reasonable time for investigation before disclosure.

LinkBoard is a single-user application. Deployments that expose it beyond localhost are expected to use HTTPS, authentication, current dependencies, and an appropriate firewall or reverse proxy.