Security Advisories

Public disclosures.

Every high- or critical-severity finding closed through the Avala bug bounty program gets a public advisory here after coordinated disclosure. Each one describes what broke, who was affected, the root cause, the fix, and credits the researcher.

informationalApr 20, 2026· 2 min read
Portal bootstrap — first advisory scaffold
Seed advisory used to verify the MDX rendering pipeline. Replace with your first real disclosure once the CNA workflow is live.
Affected: security.avala.aiReporter: Avala Security Team
Read advisory

Want your name here? Submit a valid high- or critical-severity finding.

Read the program Submit a report

Public disclosures.

Portal bootstrap — first advisory scaffold