Security advisories

This page lists the notices about vulnerabilities and incidents that affect one of our products, and it is the public way we publish them. Anyone with an account is also told individually. Anyone who uses an application without an account learns about it here, because we then hold no address and the application itself has no channel back to us.

A machine-readable version of this list is at /sicherheit/hinweise/index.json, and each advisory has its own file in the same place, named after its identifier with the ending .json.

No security advisory is published at the moment. That means exactly this and nothing more. We know of no vulnerability that would need to be reported. We accept reports on the security page.