If you discover a security vulnerability in QGIS FMV, please report it responsibly.
Do not open a public GitHub issue for security vulnerabilities.
- Email: Send details to franka1986@gmail.com
- GitHub Security Advisories: Use the private vulnerability reporting feature
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
- Acknowledgment within 48 hours
- Status update within 7 days
- Resolution timeline based on severity
This policy covers the QGIS FMV plugin code in this repository. It does not cover:
- pymisb (separate project: pypi.org/project/pymisb)
- QGIS core application
- FFmpeg / external dependencies
| Version | Supported |
|---|---|
| Latest main branch | Yes |
| Older releases | Best-effort |
- Keep QGIS, FFmpeg, and pymisb updated
- Do not open untrusted video files from unknown sources
- Review metadata before operational use (MISB data can be crafted)
- Use the plugin in a sandboxed environment for untrusted content