Security advisories

This repository contains security advisories for vulnerabilities that have been discovered and addressed in projects maintained by Avail.

Purpose

The purpose of this repository is to:

• Provide transparency about security issues that have affected our projects
• Help users understand which versions are vulnerable and which are patched
• Document our security response processes
• Serve as a historical record of security-related events

Advisory Format Each advisory is stored in the /advisories directory and follows this format:

Filename: YYYY-MM-DD-vulnerability-name.md

Content: Advisories include:

• Affected software and versions, if applicable
• Description of the vulnerability
• Impact assessment
• Patches and mitigations
• Timeline
• Credits to reporters/researchers

Reporting a Vulnerability If you believe you've found a security vulnerability in any of our projects, please report it to us by:

1. Preferred Using the Avail Immunefi Bugbounty program
2. Emailing us at: [email protected]

Please DO NOT file a public issue for security vulnerabilities.

List of advisories