Disclosures, vulnerability reports, and security guidance from the ISpectra security team.
Affects versions prior to 3.2.5. Requires immediate patching for all deployments.
OpenSSL 1.1.1 reached end of life September 11, 2023. Update to version 3.x immediately.
Ensure all Log4j deployments are on 2.17.0 or later. Patch within 30 days.
Review AWS IAM policies and ensure public access is properly restricted.
Prepare for TLS 1.3 enforcement. Plan upgrades over the next 18 months.
Several popular npm packages are deprecated. Review your dependencies and upgrade to maintained alternatives.
Please report security vulnerabilities responsibly to our security team. We appreciate your help in keeping ISpectra and our customers secure.
security@ispectratechnologies.comYou can encrypt sensitive vulnerability reports using our public PGP key for maximum confidentiality.
ISpectra follows responsible disclosure practices. We will acknowledge receipt of your report within 48 hours, investigate thoroughly, and keep you informed throughout the resolution process. We ask that you do not publicly disclose the vulnerability until we have released a patch.