sshhole does not affect exe VMs
sshhole is a password-based vulnerability; exe VMs only use public key authentication.
Security
E-mail security@exe.dev to disclose security vulnerabilities.
exe.dev does not have a bounty program.
Security Bulletins Atom feed
eMudhra CA cert compromise
Update your VMs to protect them from the eMudhra CA cert compromise.
Shared VMs exposed all HTTP ports to share recipients
When sharing a VM, all HTTP ports were proxied to e-mail-identified share recipients instead of only the specified port.