We take security seriously in the KNX.ts project. This document outlines how you can report security vulnerabilities and what versions are currently supported.
Only the latest major version is actively supported with security updates. We encourage all users to upgrade to the latest release to receive security patches.
| Version | Supported |
|---|---|
| 1.x | ✅ |
| < 1.0 | ❌ |
If you discover a security vulnerability in this project, please do not report it publicly through GitHub issues or pull requests. Instead, please report it via email to:
When reporting, please include:
- A description of the vulnerability and its potential impact.
- Detailed steps or proof-of-concept code to reproduce the issue.
- Details of the environment (Node.js version, OS, etc.) where the issue was found.
We aim to:
- Acknowledge receipt of your report within 48 to 72 hours.
- Work with you to understand and resolve the vulnerability.
- Provide a fix in a timely manner and coordinate a public release/disclosure once the fix is ready.