Security fixes are made only on the latest code in the default branch. Older builds and third-party repackagings are unsupported.

Do not open a public issue for an unpatched vulnerability. Use GitHub's Report a vulnerability form for AdvancedAppCreator/krkr2 (Security → Advisories → Report a vulnerability). Include the affected revision/platform, impact, reproduction steps, and a minimal proof of concept. Do not include real user data, credentials, or raw memory dumps.

If private vulnerability reporting is unavailable, open a public issue asking for a private contact channel without disclosing vulnerability details. Upstream KiriKiri, Kirikiri Z, and Kirikiroid2 maintainers are not the security contact for this fork.

No response or remediation deadline is guaranteed. Please allow reasonable time for triage and a coordinated fix before public disclosure.