Security fixes are applied to the latest release.

Please do not open a public issue for a security vulnerability. Use GitHub's Security → Report a vulnerability flow on this repository. Include the affected version, reproduction steps and impact. You should receive an acknowledgement within seven days.

Rewind Overlay deliberately exposes its HTTP service only on 127.0.0.1. Reports showing that the service is reachable from another device are especially important.