This policy covers every TableProApp repository that has no SECURITY.md of its own.

Email hello@tablepro.app, or use Report a vulnerability on the repository's Security tab if available. Write in English or Vietnamese.

Do not open a public issue, discussion or pull request for a vulnerability.

Include:

• The affected app, plugin, library or site, and its version or commit. Include whether it is a stable release, a Linux beta or a development build.
• The platform and OS version: macOS, iOS/iPadOS, Linux or a Windows development build. On Linux, include the distribution and package format. Include the database type when a driver is involved.
• Steps to reproduce, or a proof of concept.
• What an attacker gains: the data or access exposed.

Integrations listed in the integrations directory are built by their publishers. Report a vulnerability in one to its publisher. If a listing is malicious or impersonates someone, email hello@tablepro.app.

Only the latest release of each app and plugin gets security fixes. Check that the problem is still in the latest release before you report it.