Skip to content

Repository navigation

Security: paulober/MicroPico

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported versions

Security fixes are released for the latest version of MicroPico. Please update before reporting an issue.

Reporting a vulnerability

Please don't open a public issue. Report it privately through GitHub's private vulnerability reporting instead.

Helpful details:

  • what the issue is and what an attacker could do with it
  • steps to reproduce or a proof of concept
  • your MicroPico, VS Code and operating system versions

I aim to respond within 7 days. Once a fix is released, the advisory is published and you're credited, unless you'd rather stay anonymous.

Scope

This policy covers the MicroPico extension and its serial communication library @paulober/pico-mpy-com. Problems in the MicroPython firmware or the MicroPython stubs belong to those projects.

There aren't any published security advisories