Security / Public record
Reporting transparency
Reporting began 3 September 2026
This register shows when AutoVuln reports a vulnerability, who received the report, and when the disclosure deadline expires.
What AutoVuln publishes
Within approximately one week of reporting a vulnerability, AutoVuln publishes:
- the vendor or open-source project that received the report;
- the affected product; and
- the date the report was filed and the date when the 90-day disclosure deadline expires.
The initial notice does not include a technical description, proof-of-concept code, or details that would materially help an attacker find or exploit the vulnerability.
Current reports
| Reference | Reported to | Product | Date reported | 90-day deadline | Status |
|---|---|---|---|---|---|
| AV-001 | AMD | ******** | AMD internal assessment |
How entries change
AutoVuln updates an entry when the recipient releases a fix, the deadline changes, or the disclosure status changes.
When technical details become public, the reference will link to the disclosure. The entry can also show the fix date and the date when users could first obtain the fix.
Disclosure rules
The AutoVuln vulnerability disclosure policy defines the standard deadline, the post-fix disclosure window, grace periods, and the shorter deadline for active exploitation.