Only the latest release receives security fixes.
I ask that you do not open public Issue for security reports.
Please report a vulnerability privately via GitHub: Security → Report a vulnerability on ericwbailey/what-cant-i-press.
Include reproduction steps, affected version, and platform (macOS or Windows).
I take this seriously and will address the vulnerability as quickly as possible.