Post

Zach Daniel
@zachdaniel.dev

Hey folks! We have a CVE up for #AshFramework bypass policies. It's a *highly unlikely edge case*. But, as always, we take security extremely seriously and will always follow proper procedure here. Props to @maennchen.dev for reporting and resolving 🙇

6 reposts17 likes

Dr. Christian Geuer-Pollmann
@christian.geuer-pollmann.de

It’s awesome to see the level of dedication and professionalism how you all (with the umbrella of the ErlEF‘s CNA) are handling all of that. Big hat tip. Wanted to add some snarky joke about „making Elixir more known to the world“ via vulnerabilities and CVEs, but didn’t find the right words 🤪

Zach Daniel
@zachdaniel.dev

lol, its weird that in order to show you seriously you take security, you have to be willing to talk loudly about how you handle security vulnerabilities 😂.