No active critical advisories
Last Updated: January 5, 2025
Understanding our advisory classification system
Immediate action required. Severe risk of compromise.
Action required within 24 hours. Significant security risk.
Action required within 7 days. Moderate security risk.
Action required within 30 days. Minor security risk.
Latest security updates and patches
Updated session management to prevent potential session fixation attacks.
Low risk. No known exploitation. Preventative measure.
No action required. Auto-deployed to hosted services. Self-hosted: update to v2.4.1+
Proactive update of logging framework addressing potential vulnerability.
No impact to AionTech services. Precautionary update applied.
SDK users: update to v3.2.0 or higher.
How we handle security vulnerabilities
We welcome reports from security researchers. If you discover a vulnerability:
Within 24 hours
Within 72 hours
Within 7 days
Within 14 days
Rewarding responsible security research
Remote code execution, authentication bypass
SQL injection, XSS, privilege escalation
CSRF, information disclosure
Rate limiting issues, minor vulnerabilities
Recommendations for clients
Multi-factor authentication on all accounts
API keys every 90 days minimum
Regular review of access and activity logs
Keep all systems and dependencies current
Help us keep our systems secure by responsibly disclosing vulnerabilities
Response time: <24 hours | 24/7 Emergency Hotline: +1 (555) SECURE-1