Only the latest released version receives security fixes. Please update to the newest version before reporting a vulnerability.

If you discover a security vulnerability in this project, please report it responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

Instead, please use one of the following methods:

1. GitHub Security Advisory (preferred): Use the Report a vulnerability feature on this repository.
2. Private contact: Reach out to the maintainer @svasek via a private channel.

• A description of the vulnerability
• Steps to reproduce the issue
• The potential impact
• Suggested fix (if any)

• Acknowledgment of your report within 7 days
• An assessment and plan for a fix within 30 days
• Credit in the release notes (unless you prefer to remain anonymous)

This policy covers the neopool-modbus library code in this repository. Issues related to pymodbus, the Sugar Valley NeoPool firmware, or other dependencies should be reported to their respective projects.