Security Advisories
Last updated: 17 October 2026
This page is the official public source for security advisories published by TAJ APPS LLC. It covers vulnerabilities in our own products, and vulnerabilities our researchers find in other vendors’ software and disclose in coordination with them. Each advisory gets a TajApps identifier in the form TAJ-YYYY-NNN and, where one applies, a CVE ID. New advisories are also published in our Atom feed at /advisories/feed.xml. How we receive, coordinate and disclose vulnerabilities is set out in our Vulnerability Disclosure Policy.
Published advisories
| ID | Published | Product | Severity | CVE |
|---|---|---|---|---|
| No advisories have been published yet. Vulnerabilities under coordinated disclosure are listed here once the vendor has released a fix, or the disclosure deadline in our policy has passed. | ||||
Permanent links
Each advisory has its own permanent page at https://tajapps.com/advisories/TAJ-YYYY-NNN/, and the ID in the table above links to it. CVE records cite these URLs, so they never change once published. New advisories are also announced in our Atom feed.
What each advisory contains
- Identifier: a TajApps ID in the form
TAJ-YYYY-NNN, and the CVE ID once assigned; - Affected product: vendor, product, affected versions and fixed version;
- Severity: a CVSS score and vector, and the weakness type (CWE);
- Description and impact: what the issue is and what an attacker could do with it;
- Remediation: the fix or workaround users should apply;
- Disclosure timeline: when the vendor was notified, replied and fixed it, and when we published;
- Credit: the researcher who found it.
Report a vulnerability
To report a vulnerability in a TajApps product, email support@tajapps.com with “Security report” in the subject line. See our Vulnerability Disclosure Policy for scope, response times and safe harbour, or /.well-known/security.txt for machine-readable contact details.