Security updates are provided for the latest stable release of LOADUCK.
| Version | Security Support |
|---|---|
| Latest stable release | Supported |
| Older releases | Not guaranteed |
Users are encouraged to update to the latest version available on the LOADUCK Releases page.
If you discover a potential security vulnerability in LOADUCK, please report it responsibly.
Please do not publicly disclose unpatched security vulnerabilities through GitHub Issues, Discussions, or public pull requests.
To report a vulnerability:
- Visit the LOADUCK repository.
- Check whether private vulnerability reporting or GitHub Security Advisories are available for the repository.
- If private reporting is unavailable, contact the maintainer privately through their GitHub profile.
Please include the following information in your report, where possible:
- A description of the suspected vulnerability.
- The affected LOADUCK version and Windows version.
- Steps to reproduce the issue.
- The potential security impact.
- Relevant logs, screenshots, or a minimal proof of concept, if available.
Please avoid including passwords, access tokens, personal information, or other sensitive data in your report.
Reports will be reviewed on a best-effort basis. The maintainer may request additional information to reproduce and investigate the issue.
If a vulnerability is confirmed, reasonable efforts will be made to address it and publish an updated release when appropriate.
Please allow the maintainer reasonable time to investigate and resolve the issue before publicly disclosing technical details.
There is no guaranteed response time or service-level agreement.
LOADUCK may use third-party components and tools, including yt-dlp and FFmpeg.
Security vulnerabilities originating in third-party components should be reported to their respective maintainers when appropriate. Reports concerning how LOADUCK integrates with or uses these components should also be directed to the LOADUCK maintainer.
Third-party components are subject to their own security policies, release schedules, and licensing terms.
LOADUCK is provided on an "AS IS" basis, without guarantees that the software is free from security vulnerabilities.
Users should download releases from the official LOADUCK GitHub repository and keep the application and its bundled components up to date.
This policy may be updated as the project evolves.
Thank you for helping improve the security of LOADUCK.