Only the latest release on the releases page gets fixes.
Report vulnerabilities privately through GitHub Private Vulnerability Reporting. Never report a security problem in a public issue or pull request.
Include:
- the impact of the vulnerability,
- steps to reproduce it, and
- the PodNotes and Obsidian versions affected.
A fix ships as a PodNotes release, and the advisory is published with credit to you unless you prefer otherwise.