Report vulnerabilities privately through GitHub's private vulnerability reporting: open the repository's Security tab and choose Report a vulnerability, or go directly to https://github.com/electrification-bus/cpp-sdk/security/advisories/new. Do not open a public issue, discussion or pull request for a vulnerability.

Include the port and platform, the compiler, the commit you built, and the steps to reproduce. Remove broker passwords and other credentials from any configuration or log you attach.

Only the main branch is supported. Fixes land on main; there are no maintained release branches.