Please do not open a public issue for a vulnerability or include working credentials in logs. Use GitHub's private vulnerability reporting form in the repository Security tab.

Include the affected Flowmpeg version or commit, the operating system, the FFmpeg version, and a small reproduction. Replace tokens, passwords, private URLs, and personal data with clear placeholders.

Flowmpeg has not reached a stable release. Security fixes are applied to the latest code on main. Release support rules will be added with the first published package.