Until a stable release exists, only the newest published prerelease receives security fixes. Users should treat every beta as experimental and read the prominent security disclaimer in the README.

Do not open a public issue for a suspected vulnerability or include secrets, device addresses, communities, SNMPv3 keys, or packet captures in public. Use GitHub's private vulnerability-reporting form:

https://github.com/LibreStatic/mib-beacon/security/advisories/new

Include the affected version/platform, reproduction steps, impact, and the smallest sanitized proof available. If the private form is unavailable, wait for a private channel to be restored rather than publishing exploit details.

No bounty, response-time SLA, or guarantee of a fix is currently offered.