English | 中文
Only the latest published release receives security fixes. Please check Releases before reporting.
Please do not open a public issue for security problems. Instead:
- Use GitHub's private vulnerability reporting: Report a vulnerability.
- Or email: 1047078635@qq.com with
[DeskBox security]in the subject.
Include what you found, how it could affect users, and reproduction steps if available. You will receive an acknowledgment within 7 days. Fixes ship in the next regular release unless the issue is critical.
DeskBox is a local desktop application: it does not operate servers or process other users' data. Reports about the application itself, its installer, updater, or the optional WebDAV cloud-backup client flow are all in scope.
仅最新发布版本接收安全修复，报告前请先查看 Releases。
请不要用公开 Issue 报告安全问题，而是：
- 使用 GitHub 私有漏洞报告：Report a vulnerability。
- 或发送邮件至 1047078635@qq.com，标题注明
[DeskBox security]。
请说明发现的问题、可能对用户造成的影响，以及可复现的步骤（如有）。我们会在 7 天内确认收到；非严重问题随常规版本发布修复。
DeskBox 是本地桌面应用，不运营服务器、不处理其他用户的数据。应用本体、安装器、更新器以及可选的 WebDAV 云备份客户端链路都在受理范围内。