Security fixes are provided for the current 1.x line.

Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.

Instead, report them privately by email to peter.haller@prioritize-iot.de.

If GitHub's private vulnerability reporting is enabled on this repository, you may also use the "Report a vulnerability" button under the Security tab, which opens a private advisory visible only to the maintainers.

Please include, as far as you can:

• the affected version / commit and the profile in use (h2, postgres, keycloak, mqtt),
• a description of the issue and its impact,
• steps to reproduce or a proof of concept,
• any relevant logs or configuration (with secrets removed).

• We aim to acknowledge your report within a few business days.
• We will keep you informed about the progress toward a fix and coordinate a disclosure timeline with you.
• We ask that you give us reasonable time to release a fix before any public disclosure.

Thank you for helping keep Prioritize and its users safe.