Please report suspected security vulnerabilities privately rather than opening a public issue with exploit details.

Use the repository's Security tab and GitHub's private vulnerability reporting or security-advisory workflow when available:

https://github.com/jumpsmm7/Asuswrt-Merlin-AdGuardHome-Installer/security

Include the affected version or commit, the impacted component, reproduction steps, expected and observed behavior, and any known security impact. Please avoid including secrets, credentials, or unrelated personal data.

If private vulnerability reporting is unavailable, open a minimal public issue asking the maintainer for a private reporting channel without disclosing exploit details.

The maintainer will review reports as availability permits, confirm whether the behavior is reproducible and security-relevant, and coordinate remediation before public disclosure when practical. Reporters are asked to allow a reasonable remediation period before publishing exploit details.

Security fixes are focused on the actively maintained repository code and current release line. Older releases may require upgrading to receive a fix.