We appreciate work to discover security vulnerabilities, but as SRS is entirely volunteer driven, so we might not be able to respond to issues in time.
Please click here to report a vulnerability.
Security: ossrs/srs
Security
SECURITY.md
-
HTTP API: DOM - XSS on JSONP callbackGHSA-gv9r-qcjc-5hj7 published
Mar 28, 2024 by winlinvipHigh -
Command injection in demonstration api-server for HTTP callback.GHSA-vpr5-779c-cx62 published
Jun 10, 2023 by winlinvipHigh
Learn more about advisories related to ossrs/srs in the GitHub Advisory Database