Security fixes are applied to the latest release only. Please update to the latest release before reporting an issue.
| Version | Supported |
|---|---|
| Latest release | ✅ |
| Older releases | ❌ |
Please do not report security vulnerabilities through public GitHub issues.
Report privately via GitHub Security Advisories on this repository.
- Type of issue and its impact
- Affected source file(s) and location (tag/branch/commit or direct URL)
- Step-by-step instructions to reproduce
- Any special configuration required
- Proof-of-concept code, if available
- Acknowledgement of your report within 3 business days
- A more detailed response within 7 days indicating next steps
- Updates as we progress toward a fix, and notification when it ships
DesktopPossible is a local desktop utility. It does not run a server,
expose network endpoints, or collect telemetry. Its only network activity is an
update/announcement check that fetches a static JSON manifest from this
repository (remote/getversion.json via github.com/ghraw). The app
reads and writes its own configuration files beside the executable and, when
the start-with-Windows option is enabled, a per-user autostart registry entry.
We appreciate responsible disclosure — it helps protect all users.