Please use GitHub's private vulnerability reporting or a private Security Advisory for vulnerabilities that could cause:

• unintended memory writes or process modification;
• privilege escalation or protection bypass;
• arbitrary file writes outside a user-selected destination;
• silent network transmission or sensitive-data disclosure;
• memory-safety issues in boundary parsing;
• denial of service from crafted binary input.

Do not include real credentials, personal information, proprietary memory dumps, or copyrighted recovered files in a report. Use the included MemoryFixture or a minimal synthetic binary whenever possible.

The following are generally not vulnerabilities:

• task_for_pid being denied by macOS;
• incomplete results when the target changes its memory map;
• a malformed file being rejected by strict structural validation;
• inability to inspect SIP, sandboxed, hardened, or platform-protected processes.

• no network client or telemetry;
• no memory-write or code-injection API;
• no privilege-escalation helper;
• user-selected save destinations;
• bounded file and result sizes;
• Swift 6 strict concurrency and regression tests for parsers and cancellation.