Report a vulnerability

Please do not disclose a vulnerability in a public issue. Report it privately to the maintainers through the official repository’s security reporting facility.

Élise processes sensitive household routine data. Authentication bypass, secret exposure, command injection, data exfiltration, unsafe update behaviour and misleading reassurance are treated as urgent.

Known limits

Exported backups are encrypted, but the hub does not yet encrypt its disk unattended. Physical theft of the hub remains a documented risk.