Please do not report security vulnerabilities through public GitHub issues, discussions or pull requests.
Report them privately through GitHub's
private vulnerability reporting,
or by email to support@endurosat.com with the subject line
[SECURITY] FP.
Please include:
- the affected version or commit;
- a description of the issue and its impact;
- steps to reproduce, or a proof of concept;
- any known mitigation.
We acknowledge reports within 5 working days and keep you informed until the issue is resolved. Please give us a reasonable time to release a fix before disclosing the issue publicly.
Security fixes are made on the latest release only.
General enquiries: https://www.endurosat.com/contact/