Please do not report security problems in public issues, discussions or pull requests.

Report them privately through GitHub instead: open the affected repository, go to Security → Report a vulnerability and describe the problem, the affected version and how to reproduce it. If you are unsure which repository is affected, use openmeshtak.

Please leave out real certificates, private keys, Meshtastic PSKs, API keys and personal data. Use test values to show the problem.

Security fixes go into the latest release. Core, Web and SDK are released together under one version, so upgrade all of them to that release.