Security fixes are provided for the newest published release.

Please use GitHub's private vulnerability reporting / Security Advisories for this repository. Do not post credentials, pairing links, device identifiers or unredacted logs in a public issue.

The project intentionally keeps release signing keys, passwords, generated certificates and local pairing state outside the repository. Pull requests and issues must not include those files.