Only the latest release of each project (e.g. Redux, Updater) receives security fixes.

Please do not report security vulnerabilities through public GitHub issues.

Instead, use one of these private channels:

1. GitHub private vulnerability reporting — on the affected repository, go to the Security tab and click Report a vulnerability (preferred, if enabled for that repository).
2. Discord — send a direct message to @.munix or @safarte on the KSP2 Modding Society Discord.

Please include as much of the following as you can:

• The repository and version affected
• Steps to reproduce the issue
• The potential impact as you understand it

We'll acknowledge your report as soon as we can and keep you informed as we work on a fix. Thank you for helping keep the KSP2 Redux community safe!