public inbox for [email protected]  
help / color / mirror / Atom feed
/support/security scope += pgvector
5+ messages / 3 participants
[nested] [flat]

* /support/security scope += pgvector
@ 2026-03-26 18:31 Noah Misch <[email protected]>
  2026-03-26 18:42 ` Re: /support/security scope += pgvector Devrim Gündüz <[email protected]>
  0 siblings, 1 reply; 5+ messages in thread

From: Noah Misch @ 2026-03-26 18:31 UTC (permalink / raw)
  To: pgsql-www; +Cc: [email protected]; [email protected]

This adds pgvector to the CNA scope.  [email protected] decided on that scope
addition.


^ permalink  raw  reply  [nested|flat] 5+ messages in thread

* Re: /support/security scope += pgvector
  2026-03-26 18:31 /support/security scope += pgvector Noah Misch <[email protected]>
@ 2026-03-26 18:42 ` Devrim Gündüz <[email protected]>
  2026-03-26 20:32   ` Re: /support/security scope += pgvector Andrew Kane <[email protected]>
  0 siblings, 1 reply; 5+ messages in thread

From: Devrim Gündüz @ 2026-03-26 18:42 UTC (permalink / raw)
  To: Noah Misch <[email protected]>; pgsql-www; +Cc: [email protected]; [email protected]

Hi,

On Thu, 2026-03-26 at 11:31 -0700, Noah Misch wrote:
> This adds pgvector to the CNA scope.  [email protected] decided on
> that scope addition.

Committed, thanks.

Regards,
-- 
Devrim Gündüz
Open Source Solution Architect, PostgreSQL Major Contributor
BlueSky: @devrim.gunduz.org , @gunduz.org


Attachments:

  [application/pgp-signature] signature.asc (858B, ../../[email protected]/2-signature.asc)
  download

^ permalink  raw  reply  [nested|flat] 5+ messages in thread

* Re: /support/security scope += pgvector
  2026-03-26 18:31 /support/security scope += pgvector Noah Misch <[email protected]>
  2026-03-26 18:42 ` Re: /support/security scope += pgvector Devrim Gündüz <[email protected]>
@ 2026-03-26 20:32   ` Andrew Kane <[email protected]>
  2026-03-27 03:32     ` Re: /support/security scope += pgvector Devrim Gündüz <[email protected]>
  0 siblings, 1 reply; 5+ messages in thread

From: Andrew Kane @ 2026-03-26 20:32 UTC (permalink / raw)
  To: Devrim Gündüz <[email protected]>; +Cc: Noah Misch <[email protected]>; pgsql-www; [email protected]

Thanks Noah and Devrim.

I think it'd be good to include reporting instructions as well like pgAdmin
(possible patch attached).

- Andrew


Attachments:

  [application/octet-stream] 0001-Add-instructions-for-reporting-security-vulnerabilit.patch (1.1K, ../../CAOdR5yFoEM+72CE1w9RiD7E6_C0ngiRX=B6xysc0=L_vxEW4rQ@mail.gmail.com/3-0001-Add-instructions-for-reporting-security-vulnerabilit.patch)
  download | inline diff:
From 490be0f798fc74ad1ad18e27e125b05d6baa4bc2 Mon Sep 17 00:00:00 2001
From: Andrew Kane <[email protected]>
Date: Thu, 26 Mar 2026 13:19:50 -0700
Subject: [PATCH] Add instructions for reporting security vulnerabilities in
 pgvector

---
 templates/security/security.html | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/templates/security/security.html b/templates/security/security.html
index 287350c7..b8930ecb 100644
--- a/templates/security/security.html
+++ b/templates/security/security.html
@@ -132,6 +132,10 @@
     For security vulnerabilities in <a href="https://www.pgadmin.org/">pgAdmin</a>,
     please email <a href="mailto:[email protected]">[email protected]</a>.
   </li>
+  <li>
+    For security vulnerabilities in <a href="https://github.com/pgvector/pgvector/">pgvector</a>,
+    please email <a href="mailto:[email protected]">[email protected]</a>.
+  </li>
   <li>
     If you wish to report a security vulnerability for any other open source project in
     the PostgreSQL ecosystem (e.g. a driver, an extension, or an installer) and
-- 
2.52.0



^ permalink  raw  reply  [nested|flat] 5+ messages in thread

* Re: /support/security scope += pgvector
  2026-03-26 18:31 /support/security scope += pgvector Noah Misch <[email protected]>
  2026-03-26 18:42 ` Re: /support/security scope += pgvector Devrim Gündüz <[email protected]>
  2026-03-26 20:32   ` Re: /support/security scope += pgvector Andrew Kane <[email protected]>
@ 2026-03-27 03:32     ` Devrim Gündüz <[email protected]>
  2026-03-27 06:14       ` Re: /support/security scope += pgvector Andrew Kane <[email protected]>
  0 siblings, 1 reply; 5+ messages in thread

From: Devrim Gündüz @ 2026-03-27 03:32 UTC (permalink / raw)
  To: Andrew Kane <[email protected]>; +Cc: Noah Misch <[email protected]>; pgsql-www; [email protected]

Hi,

On Thu, 2026-03-26 at 13:32 -0700, Andrew Kane wrote:
> I think it'd be good to include reporting instructions as well like
> pgAdmin (possible patch attached).

Thanks, pushed.

Regards,
-- 
Devrim Gündüz
Open Source Solution Architect, PostgreSQL Major Contributor
BlueSky: @devrim.gunduz.org , @gunduz.org


Attachments:

  [application/pgp-signature] signature.asc (858B, ../../[email protected]/2-signature.asc)
  download

^ permalink  raw  reply  [nested|flat] 5+ messages in thread

* Re: /support/security scope += pgvector
  2026-03-26 18:31 /support/security scope += pgvector Noah Misch <[email protected]>
  2026-03-26 18:42 ` Re: /support/security scope += pgvector Devrim Gündüz <[email protected]>
  2026-03-26 20:32   ` Re: /support/security scope += pgvector Andrew Kane <[email protected]>
  2026-03-27 03:32     ` Re: /support/security scope += pgvector Devrim Gündüz <[email protected]>
@ 2026-03-27 06:14       ` Andrew Kane <[email protected]>
  0 siblings, 0 replies; 5+ messages in thread

From: Andrew Kane @ 2026-03-27 06:14 UTC (permalink / raw)
  To: Devrim Gündüz <[email protected]>; +Cc: Noah Misch <[email protected]>; pgsql-www; [email protected]

Great, thank you.

- Andrew


^ permalink  raw  reply  [nested|flat] 5+ messages in thread


end of thread, other threads:[~2026-03-27 06:14 UTC | newest]

Thread overview: 5+ messages (download: mbox mbox.gz follow: Atom feed)
-- links below jump to the message on this page --
2026-03-26 18:31 /support/security scope += pgvector Noah Misch <[email protected]>
2026-03-26 18:42 ` Devrim Gündüz <[email protected]>
2026-03-26 20:32   ` Andrew Kane <[email protected]>
2026-03-27 03:32     ` Devrim Gündüz <[email protected]>
2026-03-27 06:14       ` Andrew Kane <[email protected]>

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox