Report it privately through Report a vulnerability, or email hello@tablepro.app. Do not open a public issue, discussion or pull request for a vulnerability.

Include:

• What is affected and its version: the Mac app, the iPhone and iPad app, the Linux app, a plugin, or tablepro.app.
• The macOS or iOS version, or the Linux distribution and where the app came from, and the database type when a driver is involved.
• Steps to reproduce, or a proof of concept.
• What an attacker gains: the data or access exposed.

Write in English or Vietnamese.

• The Mac app.
• The iPhone and iPad app.
• The Linux app, from the Launchpad PPA, the COPR project or a source build of a release.
• The plugins, bundled with the app or installed from the plugin registry.
• The website, tablepro.app.

• The Mac app: the newest release line, plus security fixes on the line before it (RELEASING.md). Plugins ship with the app and follow it.
• The iPhone and iPad app, the Linux app and the website: the latest release only.

A fix ships in a new release and is listed under Security in CHANGELOG.md, or in linux/CHANGELOG.md for the Linux app. Check that the problem is still in a supported version before you report it.