Please check the following table to see which RISC OS Merlin version are supported for security updates:

If you are certain you have found a vulnerability in one of the supported versions for security updates, then please open a GitHub ticket with all the details about your findings and how we can reproduce the problem.

Please note: only Vulnerability that we can reproduce will be accepted for fixing. Also, please, make sure that the vulnerability is actually exploitable before submission, thank you for your understanding and cooperation.