Security
We take security seriously and use various measures to ensure the safety of our products. Our security policies include:
- Regular vulnerability scanning using industry-standard tools.
- We treat vulnerabilities reports as our priority. This means that we attempt to fix them as quickly as possible, therefore, we will release a hotfix for any major security vulnerability found in the most recent version of our SDK/server.
- We only use reputable 3rd party libraries and update them regularly
Reporting a Vulnerability¶
If you discover a security vulnerability, please report it to us by submitting a request in our Service Desk Portal. Include the details of the vulnerability, affected versions, and any known mitigations.
Vulnerability Scanning¶
We run vulnerability scans periodically on all components of our product, including:
- C++ SDK
- Python SDK
- Java Wrapper
- API Server
We use both open-source and proprietary vulnerability scanners such as Trivy and Veracode.
CVE History¶
Below is a table of the latest CVEs we have fixed:
| CVE | Priority | Type | Fixed Version |
|---|---|---|---|
| CVE-2026-40984 | High | Java | 3.5.2 |
| CVE-2026-40983 | High | Java | 3.5.2 |
| CVE-2026-55831 | High | Java | 3.5.2 |
| CVE-2026-56745 | High | Java | 3.5.2 |
| CVE-2026-59901 | High | Java | 3.5.2 |
| CVE-2026-55833 | High | Java | 3.5.2 |
| CVE-2026-54515 | Medium | Java | 3.5.2 |
| CVE-2026-41842 | High | Java | 3.5.2 |
| CVE-2026-41845 | High | Java | 3.5.2 |
| CVE-2026-41850 | High | Java | 3.5.2 |
| CVE-2026-56819 | High | Java | 3.5.2 |
| GHSA-mhm7-754m-9p8w | Medium | Java | 3.5.2 |
| CVE-2026-59889 | Medium | Java | 3.5.2 |
| CVE-2026-59900 | Medium | Java | 3.5.2 |
| CVE-2026-59898 | High | Java | 3.5.2 |
| CVE-2026-59899 | High | Java | 3.5.2 |
| CVE-2026-56746 | Medium | Java | 3.5.2 |
| CVE-2026-59921 | Medium | Java | 3.5.2 |
| CVE-2026-5450 | Critical | System | 3.5.2 |
| CVE-2026-5928 | High | System | 3.5.2 |
| CVE-2026-4046 | High | System | 3.5.2 |
| CVE-2026-6238 | Medium | System | 3.5.2 |
| CVE-2026-5435 | High | System | 3.5.2 |
| CVE-2026-41846 | Medium | Java | 3.5.2 |
| CVE-2026-41843 | Medium | Java | 3.5.2 |
| CVE-2026-41851 | Medium | Java | 3.5.2 |
| CVE-2026-41841 | Medium | Java | 3.5.2 |
| CVE-2026-41844 | Medium | Java | 3.5.2 |
| CVE-2026-41853 | Medium | Java | 3.5.2 |
| CVE-2026-41854 | Medium | Java | 3.5.2 |
| CVE-2026-10532 | Low | Java | 3.5.2 |
| CVE-2026-41848 | Low | Java | 3.5.2 |
| CVE-2026-41852 | Low | Java | 3.5.2 |
| CVE-2026-42055 | High | System | 3.5.1 |
| CVE-2026-42530 | High | System | 3.5.1 |
| CVE-2026-11352 | High | System | 3.5.1 |
| CVE-2026-12064 | High | System | 3.5.1 |
| CVE-2026-10536 | Critical | System | 3.5.1 |
| CVE-2026-11856 | Critical | System | 3.5.1 |
| CVE-2026-9547 | High | System | 3.5.1 |
| CVE-2026-11586 | High | System | 3.5.1 |
| CVE-2026-9080 | High | System | 3.5.1 |
| CVE-2026-8927 | Critical | System | 3.5.1 |
| CVE-2026-8286 | High | System | 3.5.1 |
| CVE-2026-9546 | High | System | 3.5.1 |
| CVE-2026-8925 | Critical | System | 3.5.1 |
| CVE-2026-9079 | Critical | System | 3.5.1 |
| CVE-2026-9545 | High | System | 3.5.1 |
| CVE-2026-8458 | Medium | System | 3.5.1 |
| CVE-2026-8924 | Critical | System | 3.5.1 |
| CVE-2026-8926 | Critical | System | 3.5.1 |
| CVE-2026-11564 | Critical | System | 3.5.1 |
| CVE-2026-8932 | High | System | 3.5.1 |
| CVE-2023-42366 | Medium | System | 3.5.1 |
| CVE-2023-42365 | Medium | System | 3.5.1 |
| CVE-2022-48174 | Critical | System | 3.5.1 |
| CVE-2023-42364 | Medium | System | 3.5.1 |
| CVE-2023-42363 | Medium | System | 3.5.1 |
| CVE-2026-47244 | High | Java | 3.5.0 |
| CVE-2026-44249 | High | Java | 3.5.0 |
| CVE-2026-45416 | High | Java | 3.5.0 |
| CVE-2026-48043 | Medium | Java | 3.5.0 |
| CVE-2026-22018 | Medium | Java | 3.5.0 |
| CVE-2026-23865 | Medium | Java | 3.5.0 |
| CVE-2026-34268 | Medium | Java | 3.5.0 |
| CVE-2026-41417 | Medium | Java | 3.4.6 |
| CVE-2026-42580 | Medium | Java | 3.4.6 |
| CVE-2026-42581 | Medium | Java | 3.4.6 |
| CVE-2026-42583 | High | Java | 3.4.6 |
| CVE-2026-42584 | High | Java | 3.4.6 |
| CVE-2026-42585 | Medium | Java | 3.4.6 |
| CVE-2026-42587 | High | Java | 3.4.6 |
| CVE-2026-45292 | Medium | Java | 3.4.6 |
| CVE-2026-4873 | Medium | System | 3.4.6 |
| CVE-2026-5545 | Medium | System | 3.4.6 |
| CVE-2026-5773 | High | System | 3.4.6 |
| CVE-2026-6253 | Medium | System | 3.4.6 |
| CVE-2026-6276 | High | System | 3.4.6 |
| CVE-2026-6429 | Medium | System | 3.4.6 |
| CVE-2026-7009 | Medium | System | 3.4.6 |
| CVE-2026-7168 | Medium | System | 3.4.6 |
| CVE-2026-22732 | Critical | Java | 3.4.5 |
| CVE-2026-22735 | Low | Java | 3.4.5 |
| CVE-2026-22737 | Medium | Java | 3.4.5 |
| CVE-2026-22748 | Medium | Java | 3.4.5 |
| CVE-2026-25854 | Medium | Java | 3.4.5 |
| CVE-2026-29129 | High | Java | 3.4.5 |
| CVE-2026-32990 | Medium | Java | 3.4.5 |
| CVE-2026-33870 | High | Java | 3.4.5 |
| CVE-2026-33871 | High | Java | 3.4.5 |
| CVE-2026-34483 | High | Java | 3.4.5 |
| GHSA-72hv-8253-57qq | High | Java | 3.4.4 |
| CVE-2026-3805 | High | System | 3.4.4 |
| CVE-2026-3783 | Medium | System | 3.4.4 |
| CVE-2026-1965 | Medium | System | 3.4.4 |
| CVE-2026-21946 | Medium | System | 3.4.3 |
| CVE-2026-21933 | Medium | System | 3.4.3 |
| CVE-2026-21932 | Medium | System | 3.4.3 |
| CVE-2026-21925 | Medium | System | 3.4.3 |
| CVE-2026-1225 | Low | Java | 3.4.3 |
| CVE-2026-0915 | Medium | System | 3.4.3 |
| CVE-2026-0861 | Medium | System | 3.4.3 |
| CVE-2025-15281 | Medium | System | 3.4.3 |
| CVE-2025-15224 | Low | System | 3.4.3 |
| CVE-2025-15079 | Medium | System | 3.4.3 |
| CVE-2025-14819 | Medium | System | 3.4.3 |
| CVE-2025-14524 | Medium | System | 3.4.3 |
| CVE-2025-14017 | Medium | System | 3.4.3 |
| CVE-2025-13034 | Medium | System | 3.4.3 |
| CVE-2025-10966 | Medium | System | 3.4.2 |
| CVE-2025-53057 | Medium | System | 3.4.2 |
| CVE-2025-53066 | Medium | System | 3.4.2 |
| CVE-2025-11226 | Medium | Java | 3.4.1 |
| CVE-2025-61795 | Low | Java | 3.4.1 |
| CVE-2023-4039 | Low | System | 3.4.0 |
| CVE-2025-8058 | Medium | System | 3.4.0 |
| CVE-2025-53864 | Medium | Java | 3.4.0 |
| CVE-2025-41248 | High | Java | 3.4.0 |
| CVE-2025-55163 | High | Java | 3.4.0 |
| CVE-2025-41249 | High | Java | 3.4.0 |
| CVE-2025-50106 | Medium | System | 3.3.2 |
| CVE-2025-50059 | Medium | System | 3.3.2 |
| CVE-2025-30754 | Medium | System | 3.3.2 |
| CVE-2025-30749 | Medium | System | 3.3.2 |
| CVE-2025-48989 | High | Java | 3.3.2 |
| CVE-2025-48924 | Medium | Java | 3.3.2 |
| CVE-2025-8916 | Medium | Java | 3.3.2 |
| CVE-2025-41242 | Medium | Java | 3.3.2 |
| CVE-2025-4802 | Medium | System | 3.2.3,3.3.1 |
| CVE-2025-48988 | High | Java | 3.2.3,3.3.1 |
| CVE-2025-49125 | Medium | Java | 3.2.3,3.3.1 |
| CVE-2025-41234 | Medium | Java | 3.2.3,3.3.1 |
| CVE-2025-46701 | Low | Java | 3.2.3,3.3.1 |
| CVE-2025-22233 | Low | Java | 3.2.3,3.3.1 |
| CVE-2025-21587 | Medium | System | 3.2.2 |
| CVE-2025-30698 | Medium | System | 3.2.2 |
| CVE-2025-30691 | Medium | System | 3.2.2 |
| CVE-2025-22235 | High | System | 3.2.1 |
| CVE-2025-22223 | Medium | System | 3.2.1 |
| CVE-2025-31650 | Medium | System | 3.2.1 |
| CVE-2013-4235 | Low | System | 3.2.0 |
| CVE-2016-2781 | Low | System | 3.2.0 |
| CVE-2022-3219 | Low | System | 3.2.0 |
| CVE-2022-41409 | Low | System | 3.2.0 |
| CVE-2023-26604 | Low | System | 3.2.0 |
| CVE-2023-29383 | Low | System | 3.2.0 |
| CVE-2023-34969 | Low | System | 3.2.0 |
| CVE-2023-45918 | Low | System | 3.2.0 |
| CVE-2023-50495 | Low | System | 3.2.0 |
| CVE-2023-7008 | Low | System | 3.2.0 |
| CVE-2024-10041 | Medium | System | 3.2.0 |
| CVE-2024-12243 | Medium | System | 3.2.0 |
| CVE-2024-13176 | Low | System | 3.2.0 |
| CVE-2024-2236 | Low | System | 3.2.0 |
| CVE-2024-26461 | Low | System | 3.2.0 |
| CVE-2024-52615 | medium | System | 3.2.0 |
| CVE-2024-52616 | medium | System | 3.2.0 |
| CVE-2024-56433 | Low | System | 3.2.0 |
| CVE-2024-8176 | Medium | System | 3.2.0 |
| CVE-2024-9143 | Low | System | 3.2.0 |
| CVE-2025-23022 | Medium | System | 3.2.0 |
| CVE-2025-24528 | Medium | System | 3.2.0 |
| CVE-2025-27363 | Medium | System | 3.2.0 |
| CVE-2025-22228 | High | Java | 3.2.0 |
| CVE-2025-24813 | Critical | Java | 3.2.0 |
| CVE-2024-12133 | Medium | System | 3.1.1 |
| CVE-2021-33503 | High | System | 3.0.2 |
| CVE-2023-43804 | High | System | 3.0.2 |
| CVE-2024-3651 | High | System | 3.0.2 |
| CVE-2020-26137 | Medium | System | 3.0.2 |
| CVE-2023-32681 | Medium | System | 3.0.2 |
| CVE-2023-45803 | Medium | System | 3.0.2 |
| CVE-2024-12133 | Medium | System | 3.0.2 |
| CVE-2024-11053 | Low | System | 3.0.1 |
| CVE-2024-50602 | Medium | System | 3.0.1 |
| CVE-2024-52533 | Medium | System | 3.0.1 |
| CVE-2024-47606 | Medium | System | 3.0.1 |
| CVE-2024-11168 | Medium | System | 3.0.1 |
| CVE-2024-9287 | Medium | System | 3.0.1 |
| CVE-2024-52530 | Medium | System | 3.0.1 |
| CVE-2024-12798 | Medium | Java | 3.0.1 |
| CVE-2024-12801 | Low | Java | 3.0.1 |
| CVE-2024-38819 | High | Java | 3.0.1 |
| CVE-2024-38827 | Medium | Java | 3.0.1 |
| CVE-2024-50379 | High | Java | 3.0.1 |
| CVE-2024-56337 | High | Java | 3.0.1 |
| CVE-2013-4235 | Low | System | 3.0.0 |
| CVE-2016-2568 | Low | System | 3.0.0 |
| CVE-2016-2781 | Low | System | 3.0.0 |
| CVE-2022-3219 | Low | System | 3.0.0 |
| CVE-2022-41409 | Low | System | 3.0.0 |
| CVE-2023-7008 | Low | System | 3.0.0 |
| CVE-2023-25193 | Low | System | 3.0.0 |
| CVE-2023-26604 | Low | System | 3.0.0 |
| CVE-2023-29383 | Low | System | 3.0.0 |
| CVE-2023-34969 | Low | System | 3.0.0 |
| CVE-2023-45918 | Low | System | 3.0.0 |
| CVE-2023-50495 | Low | System | 3.0.0 |
| CVE-2024-2236 | Medium | System | 3.0.0 |
| CVE-2024-11168 | Medium | System | 3.0.0 |
| CVE-2024-21208 | Low | System | 3.0.0 |
| CVE-2024-21210 | Low | System | 3.0.0 |
| CVE-2024-21217 | Low | System | 3.0.0 |
| CVE-2024-21235 | Medium | System | 3.0.0 |
| CVE-2024-26461 | Low | System | 3.0.0 |
| CVE-2024-26462 | Medium | System | 3.0.0 |
| CVE-2024-52533 | Medium | System | 3.0.0 |
| CVE-2024-52615 | Medium | System | 3.0.0 |
| CVE-2024-52616 | Medium | System | 3.0.0 |