Taskbar Widgets is beta software. Security fixes are provided for the latest published version only.

Please report vulnerabilities privately through GitHub Security Advisories for pfcdev/TaskbarWidgets. Include affected version, Windows build, reproduction, and impact. Do not attach real account data, tokens, Discord secrets, or Codex profiles. Please allow maintainers time to investigate before public disclosure.

The project deliberately rejects dynamically dropped widget DLLs/executables in v1. Commands are local, versioned, timestamped, and allowlisted. Reports about a bypass of these boundaries, unsafe updater asset selection, path traversal, or Explorer injection stability are particularly valuable.