Report and respond
Security advisories
When we confirm a vulnerability in one of our products, we publish an advisory here. Each one lists the products and versions affected, how serious it is, and how to fix it or work around it.
Published advisories
No security advisories have been published.
Get advisories as they’re published
An RSS feed of advisories will be available here once the first advisory is published.
How to read an advisory
Each advisory has an ID in the form MF-SA-YYYY-NNN, for example MF-SA-2026-001. We give a severity rating and, where one is available, a CVSS score and CVE ID. If an advisory affects your system and you’re not sure what to do, email quoting the advisory ID and your SO number.