| Version | Supported |
|---|---|
| 2.4.0+ | ✅ |
| < 2.4.0 | ❌ |
Please use the github security advisory feature (preferred) or report security issues to info@libiec61850.com
Security: mz-automation/lib60870
Security
SECURITY.md
-
VU#976407 - lib60870 (IEC 60870-5-101/104 protocol library, lib60870-C)GHSA-f5xp-w6f3-vvrv published
Jul 17, 2026 by mzillgithModerate -
compareCertificates matches on the certificate signatureValue bytes only, so a pinned-certificate check (allowOnlyKnownCertificates) can be bypassed for peer impersonationGHSA-fc2j-39h7-c7v9 published
Jul 15, 2026 by mzillgithHigh -
Heap-buffer-overflow in TestCommand_getFromBuffer (cs101_information_objects.c:6577)GHSA-g3w7-x5rx-83xm published
Jul 15, 2026 by mzillgithModerate -
Heap-buffer-overflow in InformationObject_ParseObjectAddress (cs101_information_objects.c:241)GHSA-7v97-jmwv-w5j7 published
Jun 5, 2026 by mzillgithModerate -
Possible NULL pointer dereference when invalid test command (C_TS_TA_1) is received by CS104 serverGHSA-75pr-rr3v-j6px published
May 29, 2025 by mzillgithHigh
Learn more about advisories related to mz-automation/lib60870 in the GitHub Advisory Database