BoothWall puts a public upload page in front of a screen at a live event, so security reports are very welcome.

Please report anything you find privately through GitHub: open the repo's Security tab and choose Report a vulnerability. Don't open a public issue for it.

Useful to include: what you found, how to reproduce it, and whether it affects the public demo at boothwall.dedic.dev or only a self-hosted setup. I'll reply as soon as I can and credit you in the fix unless you'd rather stay anonymous.

Fixes go into main. Older versions, including the devcon-2026 branch, aren't maintained.