Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it through GitHub Security Advisories rather than opening a public issue.

You will receive a response within a few days. If the issue is confirmed, a fix will be released as soon as possible.

Scope

Source code in this repository
The setup server (setup_server.py)
Shell scripts that run with elevated privileges

Out of Scope

Vulnerabilities in upstream dependencies (report those to their maintainers)
Issues requiring physical access to the Raspberry Pi hardware
The Waveshare e-Paper driver library (lib/e-Paper)

There aren't any published security advisories