# FSF publishes incident report on GNU Savannah vulnerabilities > Source: > Published: 2026-08-07 21:57:31+00:00 # FSF publishes incident report on GNU Savannah vulnerabilities [Free Software Foundation](https://www.fsf.org/author/fsfweb) [Contributions](https://www.fsf.org/contribs/fsfweb)— Published on Aug 07, 2026 05:38 PM The FSF has now published its report on the GNU Savannah vulnerabilities. In early May, security researchers from Hacktron reported vulnerabilities to the FSF affecting GNU Savannah and demonstrated an exploit. The FSF worked quickly with Hacktron to address this vulnerability and other security issues, which are now resolved. On June 19, 2026, the FSF published [information](https://www.fsf.org/news/statement-regarding-gnu-savannah-security-reports) about the incident and committed to publishing an incident report, which can now be read [here](https://static.fsf.org/nosvn/security/savannah-20260807.pdf). FSF thanks Harsh Jaiswal and Rahul Maini from [Hacktron](https://hacktron.ai/), along with GNU volunteers Ineiev, Corwin Brust, and Bob Proulx for their assistance in getting the vulnerabilities mitigated.