Please do not report a security vulnerability in a public issue, a pull request, the forum or a chat. Report it privately instead:

• GitHub (preferred): Report a vulnerability
• E-mail: if you have no GitHub account, write to info@iobroker.net with Security in the subject

We confirm that we received your report within 3 working days and send you a first assessment within 14 days. What to include in a report, the scope and how we disclose a fix are described in the ioBroker security policy.