We provide security updates for the following versions of the OpenEVSE Home Assistant integration:
| Version | Supported |
|---|---|
| Latest | ✅ |
| Older | ❌ |
We strongly recommend always running the latest version available through HACS or GitHub Releases alongside an up-to-date Home Assistant release.
The OpenEVSE integration team takes security seriously. If you believe you have discovered a security vulnerability in this project:
Please report security vulnerabilities privately using GitHub's Private Vulnerability Reporting:
- Navigate to the repository's Security tab.
- Click on Advisories ➔ Report a vulnerability.
Warning
Please do not report security vulnerabilities via public GitHub issues, discussions, or pull requests.
To help us triage and resolve the issue quickly, please provide:
- A clear description of the vulnerability and its potential impact.
- Step-by-step reproduction instructions or a minimal Proof of Concept (PoC).
- The integration version, Home Assistant version, and OpenEVSE firmware version where the issue was observed.
- Any suggested remediations or mitigations, if known.
- Acknowledgement: We aim to acknowledge receipt of your vulnerability report within 48 to 72 hours.
- Assessment: We will evaluate the report, verify the issue, and determine its severity and impact.
- Resolution: If confirmed, a fix will be prepared and released in a security advisory release.
- Credit: You will be credited in the advisory release notes (unless you prefer to remain anonymous).