--- title: Q2 2024 Security Statement slug: releases/q2-2024-security-statement docTags: createdAt: 2025-08-12T21:33:13.469Z --- **April 5, 2024** BrightSign products were not impacted by the recently discovered XZ Utils open-source library vulnerability (CVE-2024-3094/XZ). We are using a prior version of XZ that was unaffected. *BrightSign reviews the list of known CVEs affecting the OS on a quarterly basis and posts info about them on its website.*