PulseCore installs system components and works closely with controller/HID input, so we take security reports seriously.

Please do not open a public Issue for security problems.

Report privately through GitHub's private vulnerability reporting (Security → Report a vulnerability).

Please include:

• what you found and its impact,
• steps to reproduce,
• your setup (Windows version, PulseCore version).

We'll acknowledge your report and keep you updated on the fix. Thanks for helping keep PulseCore users safe.

In scope: the PulseCore application, its installer and its updater. Out of scope: third-party components (Windows, drivers) — unless the issue is in how PulseCore uses them.