Security advisories

When a flaw in hApp Auth affects people, we publish it here: what happened, who was exposed and what changed.

Published

No advisory has been published.

When we publish

We publish an advisory for any flaw that affected a person or a site using hApp Auth, once the fix is live. Each one says what happened, who was exposed and for how long, what changed and in which release, and what you need to do, if anything. The person who reported it is credited if they want to be.

A flaw found and fixed before it reached anyone is fixed without an advisory. A flaw our own audits find is handled the same way as one you report.

Report a flaw

Write to [email protected], in English or Turkish. How to report says what to include.