Report a Vulnerability (CVE)

Submitting a CVE helps improve the overall security of the digital ecosystem by making vulnerabilities publicly known, enabling vendors and users to respond appropriately. Your submission doesn't need to be complete. Partial or preliminary information is welcome. Our security team will review and enrich the data as needed to ensure accurate and responsible disclosure.

* Mandatory fields

The CVSS vector string can be computed with tools such as https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator . Our team will validate it or compute it when not provided.
Even if the given information is incomplete, our team will provide further analysis to inspect all the affected packages.

You will receive a confirmation email after your submission.