Repository navigation
PicoTCP-NG — responsible disclosure of security issues #78
Description
Hello,
We've identified several security issues in PicoTCP-NG 2.1 (virtualsquare/picotcp) that we'd like to report responsibly. Could you let us know the preferred contact for security disclosures?
Thank you.
Kind regards,
Francesco
Activity
danielinux commentedon Jul 17, 2026
Hi,
Since this is now voluntatily maintained by a group of people, I think the best way would be to create a private advisory here. I've enabled github security advisories for you to report your findings.
Thanks,
d
fralasp commentedon Jul 31, 2026
Hi, I reported all the security issues, can you confirm you see them? Thanks
scribam commentedon Aug 2, 2026
🤔 I don't see anything. Do you have something @danielinux? From my understanding, it should be visible here: https://github.com/virtualsquare/picotcp/security/advisories
danielinux commentedon Aug 3, 2026
I see the reports. I'm going to double check permissions.
danielinux commentedon Aug 3, 2026
@scribam please check again
scribam commentedon Aug 3, 2026
@danielinux still nothing 😕 In fact, I am more restricted now than before your changes 😅
danielinux commentedon Aug 7, 2026
@scribam very sorry about this. I've moved you to "Maintainer". Please let me know if anything changed
scribam commentedon Aug 7, 2026
@danielinux Thanks! I have the previous access back. AFAIK, the "Maintainer" role can not read security advisories only "Admin" can. An alternative would be to add me manually to the advisories: https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/fix-reported-vulnerabilities/add-collaborators
danielinux commentedon Aug 9, 2026
@scribam I had to add you to each single one.
scribam commentedon Aug 9, 2026
Thanks @danielinux, I confirm I have access to them 👍
danielinux commentedon Aug 10, 2026
I don't have bandwidth to address any of those, but let me know if I can assist with reviewing/ releasing once you're ready to push
the fixes.
fralasp commentedon Sep 7, 2026
Thank you all! Do you have any updates?
fralasp commentedon Sep 8, 2026
I open a PR with proposed fixes: #81
danielinux commentedon Sep 8, 2026
@fralasp thanks for going the extra mile and applying the fixes for us.