22 lines
861 B
Markdown
22 lines
861 B
Markdown
# Security Policy
|
|
|
|
## Supported versions
|
|
|
|
Until tagged releases are published, only the current default branch receives
|
|
security fixes. Supported release versions will be listed here once releases
|
|
begin.
|
|
|
|
## Reporting a vulnerability
|
|
|
|
Do not open a public issue for a suspected vulnerability. Prefer GitHub's
|
|
private vulnerability reporting from the repository's Security tab. Include
|
|
the affected commit or version, impact, reproduction steps, and any suggested
|
|
mitigation.
|
|
|
|
If private reporting is not enabled, ask the maintainer for a private reporting
|
|
channel without disclosing vulnerability details publicly.
|
|
|
|
Do not include real SNMP credentials, `.env`, `config.ini`, `state.json`,
|
|
controller addresses, AP names, or unredacted logs. Reports will be
|
|
acknowledged and updated on a best-effort basis; please allow time for a fix
|
|
before public disclosure.
|