---
title: Security Advisories
description: Security advisories for Blues products — Notecard, Starnote, and Notehub — with affected versions, severity, and remediation steps, plus how to report a vulnerability.
source_url: https://dev.blues.io/security-advisories/
canonical_url: https://dev.blues.io/security-advisories/
markdown_url: https://dev.blues.io/security-advisories.md
---

# Security Advisories

Notices about security issues affecting Blues products. For live service incidents, see [Notehub Status](https://status.notehub.io).

No advisories published

There are no current security advisories for Blues products.

## Resources

### [Security, Reliability, and Governance](https://dev.blues.io/datasheets/application-notes/blues-security-reliability-and-governance.md)

[A comprehensive overview of Blues' security and resiliency programs, from hardware-level security to operational policies.](https://dev.blues.io/datasheets/application-notes/blues-security-reliability-and-governance.md)

[View Guide](https://dev.blues.io/datasheets/application-notes/blues-security-reliability-and-governance.md)

### [Coordinated Vulnerability Disclosure Policy](https://dev.blues.io/security-advisories/disclosure-policy.md)

[How to report a vulnerability, what Blues commits to in return, and how advisories and security updates are published.](https://dev.blues.io/security-advisories/disclosure-policy.md)

[Read the Policy](https://dev.blues.io/security-advisories/disclosure-policy.md)

### [Firmware Release Policies](https://dev.blues.io/notecard/notecard-firmware-releases.md#firmware-release-policies)

[How Blues versions, supports, and patches Notecard and Starnote firmware, including the 10-year security-fix commitment for LTS releases.](https://dev.blues.io/notecard/notecard-firmware-releases.md#firmware-release-policies)

[View Policies](https://dev.blues.io/notecard/notecard-firmware-releases.md#firmware-release-policies)

### [Notehub Status](https://status.notehub.io)

[Live operational status and incident history for the Notehub service.](https://status.notehub.io)

[View Status](https://status.notehub.io)

## Report a potential vulnerability

Found a potential security issue in a Blues product? Please send us the details using the guidelines provided below. The full [Coordinated Vulnerability Disclosure Policy](https://dev.blues.io/security-advisories/disclosure-policy.md) sets out what to expect in return, including safe harbor for good-faith research.

[Email security@blues.com](mailto:security@blues.com?subject=Security%20vulnerability%20report)

### What to include

- The affected product and firmware version.
- A description of the issue and steps to reproduce it.
- Please do **not** include credentials, personal data, or customer data unless it is essential to demonstrating the issue.

### What happens next

- We will investigate, keep you informed, and coordinate any disclosure with you before publishing an advisory.
- Blues will not pursue legal action against researchers who report in good faith and avoid privacy violations, data destruction, and service disruption.