Security exploit report

[matthewlordtech]

Is there an existing issue for this?

• I have searched the existing issues

Describe The Bug

Hi, how do I go about disclosing a security vulnerability? I’ve patched it out locally but you’ll want to fix it for everyone else. I’ve had a lot of trouble contacting author privately.

To Reproduce

No response

Expected behavior

Not relevant

Relevant log output

Not relevant

Screenshots

No response

Homebridge Ring Config

Not relevant

Additional context

No response

OS

All

Node.js Version

All

NPM Version

All

Homebridge/HOOBs Version

All

Homebridge Ring Plugin Version

All

Operating System

All

[dgreif]

@matthewlordtech I did receive your emails, but haven't had a chance to dig into a solution yet. I'll chat with @tsightler, the other maintainer, and share your concerns with him. I think the situation you outlined is very low probability and has been around for a long time, but we should be able to fix it fairly easily. I'll update this issue when we have a path forward.

[matthewlordtech]

Thats great news, i'll leave it with you for now then.