Ibexa is comitted to keeping customers and end users secure, and we work hard to prevent vulnerable code or catch it before anyone can be affected. But like in any other large software project, sometimes external researchers find problems before we do. We genuinely value the contribution of security researchers who report issues responsibly to us, so that we can resolve them and provide updates before they become public knowledge.
Please see more information on:
Reporting security issues in Ibexa products
Ibexa security policy
Ibexa security advisories
We would like to sincerely thank the following security researchers who have identified and responsibly disclosed vulnerabilities to us:
2024
Rohit Raj - LinkedIn
Simon - Vade
Alec Romano
Matthias Schmidt from adesso SE
2021 - 2023
Philippe Tranca ("trancap") from Lexfo
Christoph Rottermanner and Jonas Roller from it.sec
Patrick Allaert
2019 - 2020
Mark Krogoll from Comwrap
Serhey Dolgushev from Contextual Code
Purplemet
Maxime Ropelewski
Carlos Revillo from The Cocktail
Thomas Poskocil, MSc from Radarservices Smart IT GmbH
SecuNinja