Please report vulnerabilities through GitHub private vulnerability reporting instead of a public issue.

Never attach Home Assistant tokens, private URLs, signing keys, unredacted logs, or full configuration exports. Only the latest release receives security fixes during the initial development phase.