Security fixes are released for the following versions.
| Version | Supported |
|---|---|
| 1.0.x | Yes |
| < 1.0 | No |
Please do not report security problems in public issues, pull requests or discussions.
Report them privately through GitHub's security advisories:
- Open the repository's Security tab.
- Choose Report a vulnerability.
- Describe the problem, the affected version or commit, the steps to reproduce it, and its likely impact.
Direct link: https://github.com/JeremyL691/OpenAudioHub/security/advisories/new
The maintainer will acknowledge the report, confirm whether it is a vulnerability, and keep you informed while a fix is prepared. Once a fix is released, the advisory is published with credit to the reporter unless you ask to stay anonymous.
In scope: the server, the web app, the Mac app, the container image and the installer in this repository.
Out of scope: the Plaud service itself, third-party AI providers, and problems that come from a deployment that ignores the guidance in the self-hosting guide, such as a public port without a reverse proxy.