# Question about security advisory **URL:** \ **Category:** Support\ **Created:** [May 29, 2023, 2:47pm UTC](https://discuss.pomerium.com/t/question-about-security-advisory/267 "2023-05-29T14:47:31Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![ms1111](https://avatars.discourse-cdn.com/v4/letter/m/43a26b/32.png) [@ms1111](https://discuss.pomerium.com/u/ms1111)\ **Post date:** [May 29, 2023, 2:47pm UTC](https://discuss.pomerium.com/t/question-about-security-advisory/267/1 "2023-05-29T14:47:31Z")
Hello, Thank you for publishing patch releases for the recent [security advisory](https://github.com/pomerium/pomerium/security/advisories/GHSA-pvrc-wvj2-f59p). Would you be able to share any indicators that would help determine if an installation was affected prior to patching - maybe something we can look for in the logs? Can you share if it was discovered internally, reported by a third party, or maybe even discovered after an active attack? Thanks, Mike ---
**Author:** ![bobby](https://yyz1.discourse-cdn.com/flex031/user_avatar/discuss.pomerium.com/bobby/32/1_2.png) [@bobby](https://discuss.pomerium.com/u/bobby)\ **Post date:** [May 30, 2023, 3:21am UTC](https://discuss.pomerium.com/t/question-about-security-advisory/267/2 "2023-05-30T03:21:27Z")
Hey Mike, Thanks for your question. We are working on a security incident post mortem presently. > Would you be able to share any indicators that would help determine if an installation was affected prior to patching - maybe something we can look for in the logs? Not presently. I hope to share more in this regard soon. > Can you share if it was discovered internally, reported by a third party, or maybe even discovered after an active attack? The vulnerability was discovered by one of our customers during an internal red-team exercise. We have no indication that it was being exploited in the wild. Hope that helps. Bobby