Cinderhell has not published a stable release. Security fixes currently target the latest preview line and main; old preview builds are not maintained.

Please use GitHub private vulnerability reporting. Do not open a public issue for a suspected vulnerability.

Include the affected Cinderhell version, Android/device version, impact, reproduction steps, and the smallest safe diagnostic sample. Do not send commercial WADs, signing keys, passwords, or unrelated personal data.

You should receive an acknowledgement within seven days. Confirmed issues will be assessed privately, fixed on a coordinated timeline appropriate to their severity, and credited in release notes unless you prefer otherwise.