Hello,
I have found security (memory-safety) vulnerabilities in GuruxDLMS.c (Gurux DLMS for ANSI C) and would like to report them privately under coordinated disclosure.
Could you please either enable GitHub Private Vulnerability Reporting on the GuruxDLMS.c repository, or provide a private security contact (email)? I will then share full technical details, proof-of-concept reproducers, and suggested fixes privately.
Thank you.
Hi, Can you send the email…
Hi,
Can you send the email to me where you describe those vulnerabilities? If they are correct, your name is added to the credits. There are two vulnerabilities that are under testing at the moment.
Regards,
Mikko