Please do not open a public issue for security problems. Use GitHub's private vulnerability reporting: open the Security tab of this repository and choose Report a vulnerability.

Include what you found, how to reproduce it, and the app version (Settings or the release tag). We will acknowledge the report as soon as we can and agree on a disclosure date once the fix is ready.

InpaDroid talks to a car through an adapter (USB K+DCAN, ENET, ELM327) and can run write jobs on control units. Reports about the app, its catalogs, the release workflow and the signed APK are in scope. Problems in ediabaslib or the BMW data files belong to their own projects.

Only the latest release receives fixes.