Security fixes are applied to the latest 2.x release. Please use GitHub private vulnerability reporting rather than publishing exploit details in an issue.

Text Orbit Compare opens local text files only. It does not upload document contents or perform network requests at runtime.