ArSonComp v0.2.0 is publicly marked Stable following owner acceptance, but is not independently certified across all DAWs and audio interfaces.

Please do not disclose an exploitable issue in a public GitHub issue or discussion.

If GitHub private vulnerability reporting is enabled for this repository, use Report a vulnerability on the Security tab. If it is not available, request a secure reporting route from the maintainer through a trusted private communication channel; do not send exploit details to a public issue. No security contact email has been published or assumed here.

Include the affected version/commit, operating system, reproducible impact, minimal proof-of-concept details, and a proposed mitigation where possible. Avoid including real user data, passwords or API tokens. Response timelines and bounties are not guaranteed.

Security reports may involve VST3/Standalone loading, malformed preset/state parsing, installer/update paths, privileges, dependencies or website distribution. The site is static and links to official release binaries. Distribution integrity can be verified with the release SHA-256 checksums.

Avoid claiming a program is security-certified or physically glitch-free based solely on passing CI. Refer to release status for remaining validation work.