Ibexa is comitted to keeping customers and end users secure, and we work hard to prevent vulnerable code or catch it before anyone can be affected. But like in any other large software project, sometimes external researchers find problems before we do. We genuinely value the contribution of security researchers who report issues responsibly to us, so that we can resolve them and provide updates before they become public knowledge.

Please see more information on:
Reporting security issues in Ibexa products
Ibexa security policy
Ibexa security advisories

We would like to sincerely thank the following security researchers who have identified and responsibly disclosed vulnerabilities to us:

2024

Rohit Raj - LinkedIn
Simon - Vade
Alec Romano
Matthias Schmidt from adesso SE

2021 - 2023

Philippe Tranca ("trancap") from Lexfo
Christoph Rottermanner and Jonas Roller from it.sec
Patrick Allaert

2019 - 2020

Mark Krogoll from Comwrap
Serhey Dolgushev from Contextual Code
Purplemet
Maxime Ropelewski
Carlos Revillo from The Cocktail
Thomas Poskocil, MSc from Radarservices Smart IT GmbH
SecuNinja