Skip to content

Security: Sherin-SEF-AI/RPi-Simulator

Security

SECURITY.md

Security Policy

Supported Versions

We actively support the following versions of RPi Simulator with security updates:

Version Supported
1.0.x
< 1.0

Reporting a Vulnerability

We take security vulnerabilities seriously. If you discover a security issue in RPi Simulator, please report it responsibly.

How to Report

  1. Email: Send details to connect@sherinjosephroy.link
  2. Subject: Include "SECURITY" in the subject line
  3. Details: Provide as much information as possible about the vulnerability

What to Include

  • Description of the vulnerability
  • Steps to reproduce the issue
  • Potential impact assessment
  • Suggested fix (if available)
  • Your contact information

Response Timeline

  • Initial Response: Within 48 hours
  • Status Update: Within 7 days
  • Fix Timeline: Varies based on severity (1-30 days)

Security Best Practices

When using RPi Simulator:

  1. Code Execution: The simulator runs user code in a sandboxed environment
  2. Network Access: Headless mode should be run behind proper authentication
  3. File Access: Limit file system access in production deployments
  4. Updates: Keep RPi Simulator updated to the latest version

Disclosure Policy

  • We will acknowledge receipt of vulnerability reports
  • We will provide regular updates on our progress
  • We will credit researchers who report vulnerabilities responsibly
  • We will coordinate disclosure timing with the reporter

Thank you for helping keep RPi Simulator secure!

There aren’t any published security advisories