1.4 KiB
Security Policy
Supported Versions
ESP-MQTT is distributed as an ESP-IDF component and through the ESP-IDF Component Registry.
When ESP-MQTT is used as part of ESP-IDF, please refer to the ESP-IDF Support Period Policy for information about supported ESP-IDF versions.
For the managed ESP-MQTT component, users are encouraged to use the latest available release.
Reporting a Vulnerability
Please follow the Espressif Security Incident Response Process to report a suspected security vulnerability.
Please do not create a public GitHub issue, discussion, or pull request for a security vulnerability.
When reporting an issue related to ESP-MQTT, please provide as much relevant information as possible, including:
- The affected ESP-MQTT version or commit
- The ESP-IDF version, if applicable
- The affected SoC or target
- A description of the vulnerability and its potential security impact
- Configuration required to reproduce the issue
- Steps to reproduce the issue
- A proof of concept, logs, or other supporting information, if available
If you are unsure whether an issue has security implications, please report it through the security reporting process rather than disclosing it publicly.