# Vulnerability

**URL:** <https://forums.plex.tv/t/vulnerability/762913>\
**Category:** Plex Media Server\
**Tags:** server-windows\
**Created:** [December 7, 2021, 9:17pm UTC](https://forums.plex.tv/t/vulnerability/762913 "2021-12-07T21:17:01Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![plex\_jfr.im](https://avatars.discourse-cdn.com/v4/letter/p/e274bd/32.png) [@plex\_jfr.im](https://forums.plex.tv/u/plex_jfr.im)\
**Post date:** [December 10, 2021, 7:21pm UTC](https://forums.plex.tv/t/vulnerability/762913/3 "2021-12-10T19:21:22Z")

</div>

No, actually, common practice is to not provide _any_ details until people have had a chance to upgrade. Common practice is also to list the embargo date on announcements so that people know in advance when details will be released. Common practice is _ **not** _ to pretend that a one-line changelog entry is a vuln disclosure.

PS people have had over a week to upgrade. It’s spelled “wait”, by the way.

---

_[View the full topic](https://forums.plex.tv/t/vulnerability/762913)._