If you discover a security vulnerability in Winget-AutoUpdate, please do not open a public issue.

Instead, use GitHub's private vulnerability reporting feature:

Security → Advisories → Report a vulnerability

Please include, when possible:

• A description of the vulnerability
• Steps to reproduce the issue
• A proof of concept
• The potential security impact
• The affected version(s) of Winget-AutoUpdate

We appreciate responsible disclosure and will work with you to investigate the issue before any public disclosure.