Report authentication bypasses, credential exposure, unsafe transmit behavior and other security issues privately with GitHub Security Advisories. Do not open a public Issue containing server passwords, access tokens, device bearer tokens, APRS passcodes, signing keys, certificate fingerprints, precise private coordinates or complete device logs.

Include the affected commit/version, device model, observed impact and the smallest sanitized reproduction details. Do not perform unsupervised radio transmission, destructive provisioning or location publication to collect evidence.