Only the latest release receives security updates. Please upgrade before reporting.

Do not open a public issue for security vulnerabilities.

Instead, use GitHub's private vulnerability reporting to report security issues confidentially.

Please include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

You will receive an initial response within 72 hours. Once confirmed, a fix will be released as soon as possible with credit to the reporter (unless anonymity is requested).

This policy covers the ha-syncthing-extended Home Assistant custom integration. Issues in Syncthing itself should be reported to the Syncthing project.