Confidentially requesting fixes to security vulnerabilities

[jtharbison-slack (Justin Harbison)]

When our tooling reports an unaddressed security vulnerability in the SDK, we need a way to confidentially request a fix. While the vulnerability is public, our use of a product containing the vulnerability and our interest in having it fixed we want to keep private. A sophisticated attacker could choose to seek out this knowledge when looking for attack vectors.

Can you please let us know how we can best confidentially request these fixes?

[agutschow (Alicia Gutschow)]

@colin_mckibben, @colin_mckibben

Can you help with this?

Alicia

[jtharbison-slack (Justin Harbison)]

Our CSM says we can report these through the support portal and they’ll be able to direct it appropriately.