Please do not publish security-sensitive reports as public issues if they could expose users to code execution, privilege escalation, or installer tampering.

For ordinary bugs, include the VLC version, Windows version, architecture, plugin version, and reproducible steps.

Release binaries should always be accompanied by SHA-256 checksums.