Do not open a public issue for a security problem.

1. Go to the Security tab of this repository.
2. Select Report a vulnerability.
3. Describe the problem and the steps to reproduce it.

Only the maintainer can see the report. Expect a first reply within 7 days.

• The Octet desktop app and its installers.
• Files that Octet opens or pastes (CDX, CDXML, MOL, SMILES and others). A crafted file that crashes Octet, runs code or reads files is in scope.

Only the latest release gets security fixes. To get them, update Octet: Octet > Check for Updates… on the Mac, Help > Check for Updates… on Windows and Linux. Each update is signed, and Octet installs it only when the signature is correct.