Apache Project Security Information

Here is a list of pages ASF projects maintain to provide information on known security vulnerabilities. Each entry also has the security contact for reporting new vulnerabilities related to that project. Note that not all project security teams have a dedicated address for reporting new vulnerabilities.

To report a vulnerability in an Apache project that is not listed below, contact the Apache Security Team.

Project security page	Contact
Apache Accumulo	Apache Security Team
Apache AGE	Apache Security Team
Apache Airflow	Apache Security Team
Apache Ambari	Apache Ambari Security Team
Apache Ant	Apache Security Team
Apache Any23	Apache Security Team
Apache Portable Runtime (APR)	Apache Security Team
Apache Archiva	Apache Security Team	Advisories
Apache Atlas	Apache Security Team
Apache BookKeeper	Apache Security Team
Apache bRPC	Apache Security Team
Apache Camel	Apache Security Team	Advisories
Apache Cassandra	Apache Security Team
Apache CloudStack	Apache Security Team
Apache Commons	Apache Commons Security Team
Apache CouchDB	Apache CouchDB Security Team
Apache CXF	Apache Security Team
Apache Directory	Apache Security Team
Apache DolphinScheduler	Apache Security Team
Apache Druid	Apache Security Team
Apache Dubbo	Apache Security Team
Apache Fineract	Apache Fineract Security Team
Apache Geronimo	Apache Geronimo Security Team
Apache Pulsar	Apache Security Team
Apache Guacamole	Apache Guacamole Security Team
Apache Hadoop	Apache Hadoop Security Team
Apache Helix	Apache Security Team
Apache Hive	Apache Hive Security Team
Apache HTTP Server	Apache HTTP Server Security Team	Advisories
Apache Ignite	Apache Ignite Security Team
Apache InLong	Apache Security Team
Apache IoTDB	Apache Security Team
Apache Jackrabbit	Apache Jackrabbit Security Team
Apache James	Apache Security Team
Apache Jena	Apache Security Team
Apache JMeter	Apache Security Team
Apache Johnzon	Apache Security Team
Apache JSPWiki	Apache Security Team
Apache Kafka	Apache Kafka Security Team	Advisories
Apache Karaf	Apache Security Team
Apache Kylin	Apache Security Team
Apache Libcloud	Apache Libcloud Security Team
Apache Linkis	Apache Security Team
Apache Logging	Apache Logging Security Team
Apache Lucene	Apache Lucene Security Team
Apache ManifoldCF	Apache Security Team
Apache Maven	Apache Security Team
Apache Metron	Apache Metron Security Team
Apache MINA	Apache Security Team
Apache NiFi	Apache NiFi Security Team	Advisories
Apache OFBiz	Apache OFBiz Security Team
Apache OpenMeetings	Apache OpenMeetings Security Team
Apache OpenOffice	Apache OpenOffice Security Team	Advisories
Apache ORC	Apache ORC Security Team
Apache PDFBox	Apache Security Team
Apache Pulsar	Apache Security Team
Apache Ranger	Apache Security Team
Apache RocketMQ	Apache Security Team
Apache Santuario	Apache Security Team
Apache Sentry	Apache Sentry Security Team
Apache ShardingSphere	Apache Security Team
Apache ShenYu	Apache Security Team
Apache Shiro	Apache Shiro Security Team
Apache SINGA	Apache SINGA Security Team
Apache Sling	Apache Sling Security Team
Apache Solr	Apache Solr Security Team	Advisories
Apache SpamAssassin	Apache SpamAssassin Security Team
Apache Spark	Apache Spark Security Team	Advisories
Apache StreamPark (Incubating)	Apache Security Team
Apache StreamPipes	Apache Security Team
Apache Struts	Apache Struts Security Team	Advisories
Apache Subversion	Apache Subversion Security Team	Advisories
Apache Superset	Apache Security Team	Advisories
Apache Tomcat	Apache Tomcat Security Team	Advisories
Apache Traffic Control	Apache Traffic Control Security Team
Apache Traffic Server	Apache Traffic Server Security Team
Apache Trafodion	Apache Trafodion Security Team
Apache UIMA	Apache Security Team
Apache XML Graphics	Apache Security Team
Apache Zeppelin	Apache Zeppelin Security Team
Apache ZooKeeper	Apache ZooKeeper Security Team