Only the latest commit on the main branch receives security fixes.

Please do not open a public issue for security problems.

Report privately using GitHub private vulnerability reporting, or email sanskartiwari.smt@gmail.com with:

• A description of the issue and its impact
• Steps to reproduce (affected file, firmware version, or configuration)
• Any suggested fix

You can expect an acknowledgement within 7 days and a status update within 30 days.

• Never commit real WiFi credentials or API keys. Use .env (see .env.example) and the ESP32 credential helper update_wifi.py.
• If you find credentials accidentally committed, report them so they can be rotated.