Please do not report security vulnerabilities through public GitHub issues.

Report a vulnerability using either of these private channels:

• Open the repository’s Security page, select Advisories, and then select Report a vulnerability.
• Submit a report through the pyOBD support page.

Include the following information when possible:

• Affected pyOBD version
• Operating system
• Description and potential impact
• Steps to reproduce
• Proof of concept, logs, or screenshots
• Suggested mitigation, if known

Please avoid including passwords, API keys, vehicle-owner information, VINs, or other sensitive data. Do not perform testing against vehicles, systems, or devices you do not own or have permission to test.

Reports will be reviewed on a best-effort basis. You should normally receive an initial response within seven days. If the report is accepted, updates will be provided while a fix is developed. If it is declined, an explanation will be provided when practical.

Please allow reasonable time for investigation and remediation before publicly disclosing a vulnerability.