Elixir Security Mailing List

Questions & Help Questions
1

Does Elixir have a standard way of disclosing any security vulnerabilities/advisories outside of the “Elixir News” forum topic?

We are looking to bring Elixir into our organization, and are looking for some way that our SRE team can keep abreast of any potential security disclosures.

Something like the following for other languages:

NodeJS: Security Policy · nodejs/node · GitHub
Python: Mailman 3 Info | security-announce@python.org - python.org
Java: Critical Patch Updates, Critical Security Patch Updates, Security Alerts and Bulletins
GoLang: Redirecting to Google Groups per Security - The Go Programming Language

Thanks in advance!

2

We don’t currently but we shall. I believe we have done only one security release since v1.0.

3

For discussion: https://github.com/elixir-lang/elixir/pull/7996

4

Jose and team, thanks so much for getting this taken care of!