We actively maintain and provide security updates for the current major version of Home Management:

We take the security and privacy of Home Management and its users very seriously. If you believe you have found a security vulnerability in this project, please follow the coordinated disclosure process outlined below.

Please do not report security vulnerabilities through public GitHub issues, discussions, or social media.

Instead, please report vulnerabilities via one of the following private channels:

1. GitHub Private Vulnerability Reporting (Preferred):

   • Navigate to the repository's Security tab.
   • Click on Advisories -> Report a vulnerability.
   • Fill out the advisory form with detailed reproduction steps.

2. Direct Security Email:

   • Send an encrypted or plain email to: homemngdev@gmail.com
   • Use the subject line: [SECURITY] Potential vulnerability in Home Management

To help us triage and resolve the issue quickly, please include as much of the following as possible:

• Type of vulnerability (e.g., XSS, prototype pollution, CSP bypass, SSR injection).
• Step-by-step instructions or proof-of-concept (PoC) code to reproduce the issue.
• The component or file affected.
• Potential impact or attack scenario.
• Any suggested fix or remediation, if known.

• Acknowledgment: We aim to acknowledge receipt of your vulnerability report within 48 hours.
• Investigation: We will investigate the findings, determine severity, and keep you informed of our progress.
• Fix & Disclosure: Once a fix is verified, a patch release will be published. If appropriate, a CVE will be assigned through GitHub Security Advisories.
• Credit: We will gladly credit your responsible disclosure in the release notes and advisory (unless you wish to remain anonymous).

Thank you for helping keep Home Management and its community secure!