LAN BAT repositories configure live home infrastructure, so please report vulnerabilities privately rather than in public issues, pull requests or IRC.

Use GitHub's private vulnerability reporting: open the affected repository's Security tab and choose Report a vulnerability (https://github.com/lanbat/<repository>/security/advisories/new).

Include the affected files or components, what an attacker could do, and how to reproduce it if you can.

These are personal projects maintained on a best-effort basis. You will get an acknowledgement once the report is seen, and a fix or an explanation afterwards.

Report bugs in upstream software (NixOS, OpenWrt, container images, models) to those projects.