DBison holds database credentials and connects to your servers, so security reports are taken seriously.

Please do not open a public issue. Report it privately instead:

• through GitHub: Security ▸ Report a vulnerability on this repository; or
• by email to jan@vorisek.me.

Include the DBison version, your operating system, the steps to reproduce the problem and what an attacker could do with it. You will get a reply within a week. Once a fix is released, you will be credited in the release notes unless you prefer not to be.

Only the latest release receives security fixes. Installed copies update themselves automatically.