Please report suspected vulnerabilities privately through GitHub's Security > Report a vulnerability flow. Do not open a public issue for an unfixed credential, authentication, data-loss, or command-execution problem.

Security fixes are provided for the newest release. Reports should include the affected version, operating system, backend, reproduction steps, and whether real Proton Drive data or credentials may have been exposed. Never include real passwords, session tokens, vault files, or rclone configuration in a report.

The project is an unofficial wrapper. Proton account or service incidents should be reported to Proton through its official security channels.