I think this answer is wrong or very dangerous, but I am not a lawyer. The AGPL v3 says: >... your modified version must prominently offer all users interacti

I think this answer is wrong or very dangerous, but I am not a lawyer. The AGPL v3 says: >... your modified version must prominently offer all users interacting with it remotely through a computer network .... an opportunity to receive the Corresponding Source of your version by providing access to the Corresponding Source from a network server at no charge..... > if there is a security issue and it has an emergency patch but there is some coordinated disclosure going on so its not public yet, is this an agpl violation? When you have the permission from all copyright holder to make an exception to the AGPL you do not have to publish the source code. Otherwise you have to publish it. If it is an open source project with many contributors and the copyright stays at the original authors getting such a permission is practically impossible.