If you believe you have found a security issue in mobile-update-server, please email security@zyno.io rather than opening a public issue or pull request.

Please include:

• A description of the issue and its impact
• Steps to reproduce, and a proof-of-concept if you have one
• The version (commit SHA or release tag) you tested against
• Whether you would like to be credited in the disclosure

We will acknowledge your report within a few business days and keep you updated as we investigate. Once a fix is available we will coordinate disclosure with you.

Only the latest release on main is supported with security fixes. This project uses date-based versioning (YY.MMDD.HHmm) and does not maintain LTS branches.