SQLRunboard has no release yet. After the first release, only the latest release gets security fixes.

Do not open a public issue for a vulnerability.

1. Go to the Security tab of this repository.
2. Select Report a vulnerability.
3. Give the steps to reproduce the problem, and the effect.

The maintainer will reply in 7 days. The maintainer will tell you when a fix is available.

These subjects are in scope:

• The local GUI server and its access token.
• The storage of connection settings and passwords.
• The execution of scripts against a target.

SQLRunboard runs the T-SQL scripts that you give it. A script that does damage is not a vulnerability in SQLRunboard.