Security
Report a security issue without sharing private data.
On this page
LedAlert is for ambient awareness, not safety alarms. Use WLED on a trusted local network with one realtime controller. See Compatibility and the integration reference for supported setups and data handling.
Reporting a suspected vulnerability
Report privately through GitHub's vulnerability reporting: Security → Report a vulnerability. Never disclose vulnerability details in a public issue.
Privately share the LedAlert version, OS and desktop, reproduction steps, expected and actual behavior, and potential impact. Keep credentials, personal configurations, LAN addresses, notification text and raw traces out of attachments, and use synthetic data with devices you own or have permission to test.
Response and disclosure
The maintainer will assess the report and coordinate a fix and disclosure with you. No response deadline, bounty or legal safe harbor is promised. Release notes identify shipped fixes.