Security fixes are released for the latest version of Affected available on JetBrains Marketplace. Upgrade before reporting an issue that affects an older version.

Use GitHub private vulnerability reporting. Include the affected version, impact, reproduction steps and any proposed fix. Do not include credentials, private source code or customer data.

Reports are reviewed as maintainer capacity allows; there is no guaranteed response or fix timeline. Keep vulnerability details private until a fix and coordinated disclosure are ready. Ordinary bugs belong in the public issue tracker. Conduct incidents belong in CODE_OF_CONDUCT.md.