We appreciate work to discover security vulnerabilities, but as SRS is entirely volunteer driven, so we might not be able to respond to issues in time.

Please click here to report a vulnerability.

Security fixes go to SRS 6.0, 7.0 and 8.0. SRS 5.0 and older are end of life, so please upgrade.

The published advisories, with their vulnerable and patched versions, are in Security Advisories.