Currently, only the latest release is actively supported for security updates.
| Version | Supported |
|---|---|
| 1.2.x | ✅ |
| < 1.2 | ❌ |
If you discover a vulnerability in dlna-server, report it by opening an issue on GitHub and mark it as a security report if the platform offers that option. Use email instead if the maintainers publish a private security contact in the repository settings.
We try to acknowledge all security reports within 3-5 business days. We will work to patch serious flaws in networking (SSDP, HTTP layer) as a priority. If your vulnerability report is accepted, a CVE may be requested, and we will credit you in the release notes.