Security Advisories

Renesoft's security team audits the open-source libraries that production software is built on — identity and token verification, image processing, static-file serving, a Python web framework. Each finding is a precise, exploitable flaw in code that is otherwise sound and widely trusted.

Every issue is reported privately to the maintainer and confirmed against the real package; it appears here only once a public GHSA or CVE record exists. Findings still under embargo are withheld until that disclosure completes. Each advisory below links to its CVE and the maintainer's advisory — to report a vulnerability in something Renesoft runs, see our disclosure policy and security.txt.