Please do not open a public GitHub issue for a suspected security vulnerability.

Send a private report to info@ttstudio.net with the subject Kodo security report.

Include, when possible:

• the affected Kodo version and Apple OS version
• a clear description of the issue and its impact
• minimal reproduction steps or a proof of concept
• whether credentials, private data or remote systems may be exposed
• a safe way to contact you for follow-up

Do not send real credentials, production private keys, access tokens or data belonging to another person. Use test data and redact sensitive material.

We will acknowledge a complete report, investigate it and coordinate disclosure when appropriate. Please allow reasonable time for a fix before publishing details.

Security fixes target the latest version available on the App Store. Users should update Kodo and iOS or iPadOS before reporting a problem that may already be resolved.