Security notification mailing list?

I was just wondering if elixir and phoenix have a security anouncement mailing list where they announce important updates that I can subscribe to? Similar to this for rails?

I am not on this forum on a daily base and would love not to miss those important updates.


Phoenix has for privately disclosing vulnerabilities, but we dissmentate disclosures through the phoenix-core mailing list. (and this forum). As the community grows, I will re-evaluate a separate list, but the phoenix-core ML remains the goto place for disclosures today.


You can also ‘watch’ the Elixir News and Phoenix News sections if that’s any use to you:

Just select Watch First Post - this should notify you of all new threads in the section :slight_smile: