The IGNITE source code is published here, but no firmware release has been made yet. No firmware version is represented here as supported or security-audited. A supported-version policy must accompany the first release.

Use Report a vulnerability. Do not put exploit details, credentials or personal data in public issues or Discord.

Include the affected commit or release, the expected and observed behavior, reproduction steps, and the potential impact. Redact secrets and personal information.

The maintainers follow the organization's security policy: acknowledgment target of three working days and coordinated disclosure with the reporter. These are response targets, not a guarantee of a fix within a particular period.