s0meter runs on a Raspberry Pi in a home network and reads energy and water meters and serves the readings through an HTTPS API. Reports of security issues are taken seriously.

Please do not open a public issue. Report it privately through GitHub instead: Security → Report a vulnerability (direct link).

Helpful details:

• the affected version (s0meter --version, or GET /version on the device)
• steps to reproduce
• what an attacker could achieve with it

You will usually get an answer within a week. s0meter is a spare-time project, so no fixed response time can be promised.

Security fixes are made for the latest release only.