Currently supported stable Cobalt versions are.

Although Cobalt is built to process web content similar to browsers, it is not a web browser. Our security model assumes only trusted content processing.

Please use https://developers.google.com/youtube/cobalt as an overall guide where to report issues.

Critical security vulnerabilities should be reported via [email protected].