If you discover a security vulnerability in BCSV, please report it responsibly:
- Do NOT open a public GitHub issue for security vulnerabilities
- Use GitHub Security Advisories to report privately
- Alternatively, contact the maintainer directly via the email listed in the repository
- Acknowledge: Within 7 days of report
- Assessment: Within 14 days — determine severity and affected versions
- Fix: Coordinated disclosure with patch release
| Version | Supported |
|---|---|
| 1.5.x | ✅ Active |
| 1.4.x | |
| < 1.4 | ❌ End of life |
BCSV is a file format library. Security concerns primarily involve:
- Buffer overflows from malformed files
- Denial of service from crafted inputs (e.g., excessive allocation)
- Integer overflow in codec/sampler subsystems
The library does not handle network I/O, authentication, or encryption.