Security updates are provided for the latest public release of My Sensor.
Older versions may not receive fixes. Please update to the latest release before reporting an issue, unless the issue also affects the current version.
Please do not report security vulnerabilities in public GitHub issues.
If you find a vulnerability, report it privately using one of these options:
- GitHub private vulnerability reporting or Security Advisories, if available for this repository.
- Contact the maintainer through the GitHub profile linked from this repository.
Please include:
- A short description of the issue.
- Steps to reproduce it.
- The affected app version or commit.
- Any relevant logs, screenshots, or proof-of-concept details.
Security reports may include, but are not limited to:
- Exposure of API keys, signing keys, or other secrets.
- Unsafe handling of location data.
- Network or API request issues that could leak user data.
- Vulnerabilities in app dependencies or build configuration.
Reports will be reviewed as soon as reasonably possible. If the issue is confirmed, a fix will be prepared and released with an appropriate note in the release history.