PlutarchPages opens files from strangers, so a crash, a data leak or a redaction that leaves content behind counts as a security problem.

Report a vulnerability privately through GitHub's private reporting. Please don't open a public issue for it. Include the version or commit, your platform and a synthetic file that reproduces the problem. Don't attach a document with personal data.

If the problem also affects upstream PdfCraft, say so; it may need reporting there as well. Upstream's team doesn't handle reports about this fork.

Only the latest commit on main and the latest release, once there is one, receive fixes.

• Redaction removes marked content from the file, and refuses, changing nothing, when content under the marks is also used where the marks don't reach. Check the result before you share it.
• Optional converters run programs you installed yourself (LibreOffice, Chrome or Edge, eSpeak NG) as separate processes. They are off by default where they convert files.
• The MCP server and the UI control channel run only when you start them.