Security Advisories

Security advisories for the Datab Node platform live here. Each advisory carries an identifier, severity, affected versions, mitigations, and a fix-or-workaround timeline.

Status

No public advisories are listed here at this time. This page is not a substitute for direct institution-specific security notices.

Disclosure policy

• Vulnerabilities are reported to databsystems@gmail.com with subject line SECURITY.
• Include affected product, version, steps to reproduce, and a safe contact address. Do not include customer data or secrets.
• Datab coordinates validation, mitigation, and disclosure with the reporter and affected institutions.

Advisory template

DTAB-YYYY-NN  | YYYY-MM-DD

Title: ...
Severity: critical | high | medium | low
Affected: datab-app <version range>, atlas-core <version range>
Discovered: <reporter or "internal">
Status: mitigated | patched | acknowledged

Description: ...
Impact: ...
Mitigation: ...
Fix: <version + commit hash>
Workaround: ...

Linked runbooks

Incident response runbooks for operators are in the repository at docs/security/runbooks/. Five P0/P1/P2 runbooks cover unauthorized admin access, database export attempts, node compromise, lost recovery credentials, and snap channel downgrades.