Hootoshop processes images locally in the browser and does not require server-side image uploads.

Please do not open public issues for suspected vulnerabilities.

Use GitHub private vulnerability reporting for openhoo/hootoshop if it is enabled. If private reporting is not available, open a minimal public issue asking for a maintainer contact path without disclosing technical details.

Please include:

• Affected version or commit
• Clear reproduction steps
• Expected impact
• Any known workaround