x360-native is experimental. Security fixes target the current main branch; older previews have no guaranteed backports. Include the affected release/commit in your report. Do not open a public issue or PR containing vulnerability details.

When enabled, use GitHub Security → Report a vulnerability on this repository. This opens a private report for the maintainer, not a public issue.

Private vulnerability reporting was disabled when inspected on 2026-10-15. If the button is unavailable, open an issue with only the title "Request to enable private vulnerability reporting" and no technical details, affected component, exploit, logs or attachments. Wait for the maintainer to enable the private channel, then submit the details there. Do not post personal contact information or sensitive details while arranging the channel.

Include affected versions, impact, prerequisites, minimal reproduction steps and a proposed fix if available. Prefer synthetic inputs. Never attach games, XEX, firmware, keys, account data or proprietary memory dumps, even to a private report. Coordinate disclosure with the maintainer so a fix and advisory can be prepared. There is no guaranteed response time; follow up in the private report when possible.

Ordinary crashes and compatibility problems without a security impact belong in the public issue forms. If unsure, use the private reporting procedure first.