steve-community / steve

SteVe - OCPP server implementation in Java
GNU General Public License v3.0
775 stars 381 forks source link

Security Issue #1120

Open JulianZackWu opened 1 year ago

JulianZackWu commented 1 year ago

Dear author, how can I report a security issue for you, just paste the details here or send it to you by email? Additionally, would you mind applying a CVE serial number for me after that? Thank you:)

slachiewicz commented 1 year ago

can we use this? https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability

ntc-swiss-team commented 3 months ago

We'd also appreciate it if private advisories could be enabled or mention a communication channel for security topics.