Security fixes are provided for the latest published Glace release.

Please report vulnerabilities privately through GitHub private vulnerability reporting.

Do not open a public issue for a suspected vulnerability. Include the affected Glace version, macOS version, reproduction steps, impact, and any suggested mitigation. You should receive an initial response within seven days.

Glace never needs passwords, recovery keys, or other private credentials in a report.