Reporting a vulnerability in filebeat?

[mlucia (Mark Lucia)]

One of my colleagues found a vulnerability between filebeats ssl and logstash ssl.
Whom should we contact regarding this?

[exekias (Carlos Pérez Aradros)]

Hi @mlucia,

The official procedure is defined here: https://www.elastic.co/community/security, please don't publish any info about it here, just send a report to security@elastic.co and the team will evaluate it as soon as possible.

Thank you in advance
Best regards

[mlucia (Mark Lucia)]

@exekias

The official procedure is defined here: https://www.elastic.co/community/security, please don’t publish any info about it here, just send a report to security@elastic.co and the team will evaluate it as soon as possible.

Thank you in advance

Best regards

Understood - would never do that, just wanted to make certain we got it to the correct place.

Thanks!