Only the latest release is actively supported with security fixes.

This project is a bare-metal 1-Wire library for STM32 (the 1-Wire layer plus the DS18B20 and DS2431 drivers) and does not process untrusted input in a typical networked sense. However, if you find a security issue — for example in the 1-Wire protocol handling, buffer handling in src/onewire.c, src/ds18b20*.c or src/ds2431*.c, in examples/, or in the build tooling — please do not open a public issue.

Instead, report it privately by opening an issue on GitHub and marking it as a security vulnerability (GitHub's "Report a vulnerability" option), or contact the maintainer directly.

Please include:

• A description of the vulnerability
• Steps to reproduce
• The affected version(s)
• Any suggested fix, if you have one

We aim to acknowledge reports within a few business days and to publish a fix in a new release as soon as practical.