Skip to content

Security: Appz4Fun/nzbdavkodi

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it responsibly:

  1. Do not open a public issue
  2. Email the maintainer or use GitHub's private vulnerability reporting
  3. Include steps to reproduce and any relevant details

We will respond within 72 hours and work to release a fix promptly.

Supported Versions

Version Supported
Latest release Yes
Older releases No

Scope

This addon runs locally on your Kodi device and communicates with your own NZBHydra2 and nzbdav instances. Security concerns include:

  • API key handling and storage
  • WebDAV credential management
  • URL construction and validation
  • XML parsing of NZBHydra2 responses

There aren't any published security advisories