PumpSteer is a Home Assistant custom integration. Security fixes are normally provided for the latest released version only.

Users are encouraged to keep PumpSteer updated through HACS or by installing the latest release from GitHub.

If you discover a security vulnerability in PumpSteer, please do not open a public GitHub issue with sensitive details.

Instead, report it by contacting the maintainer directly through GitHub.

When reporting a vulnerability, please include:

• A clear description of the issue
• Steps to reproduce it, if possible
• Which PumpSteer version you are using
• Which Home Assistant version you are using
• Any relevant logs, with private information removed

I will review reported vulnerabilities as soon as possible and decide whether a fix, advisory, or public issue is needed.

Security issues may include, but are not limited to:

• Unsafe handling of credentials or tokens
• Unintended exposure of Home Assistant data
• Unsafe service calls
• Problems that could allow remote or unauthorized control
• Vulnerabilities in communication with optional devices such as Ohmigo

General bugs, feature requests, and configuration questions should be reported as normal GitHub issues.