Introducing Octopus security advisories
Blog post from Octopus Deploy
Octopus Deploy is enhancing its communication strategy for disclosing product security vulnerabilities by introducing Octopus security advisories. Previously, vulnerabilities were communicated through CVE databases and release notes, assuming customers would check these regularly. The new advisories will consolidate release notes, CVE details, and additional information in one accessible location, providing details such as vulnerability severity, affected versions, and known exploits. These advisories will be posted on advisories.octopus.com and linked on the Octopus Deploy Twitter feed. The initiative aims to better inform and protect customers against potential security risks by ensuring they have comprehensive and easily accessible information.