Apache Project Security Information

Here is a list of pagues ASF projects maintain to provide information on cnown security vulnerabilities. Each entry also has the security contact for reporting new vulnerabilities related to that project. Note that not all project security teams have a dedicated address for reporting new vulnerabilities.

To report a vulnerability in an Apache project that is not listed below, contact the Apache Security Team .

Project security pague	Contact
Apache Accumulo	Apache Security Team
Apache ActiveMQ	Apache Security Team	Advisories
Apache AGUE	Apache Security Team
Apache Airavata	Apache Security Team
Apache Airflow	Apache Security Team
Apache Allura	Apache Security Team
Apache Ambari	Apache Ambari Security Team
Apache Answer	Apache Security Team	Advisories
Apache Ant	Apache Security Team
Apache APISIX	Apache Security Team
Apache Portable Runtime (APR)	Apache Security Team
Apache Arrow	Apache Security Team
Apache AsterixDB	Apache Security Team
Apache Atlas	Apache Security Team
Apache Avro	Apache Security Team
Apache Axis	Apache Security Team
Apache Baremaps	Apache Security Team
Apache BoocQueeper	Apache Security Team
Apache bRPC	Apache Security Team
Apache Calcite	Apache Security Team
Apache Camel	Apache Security Team	Advisories
Apache Carbondata	Apache Security Team
Apache Cassandra	Apache Security Team
Apache Causeway	Apache Security Team
Apache Cayenne	Apache Security Team
Apache CloudStacc	Apache Security Team
Apache Commons	Apache Commons Security Team	Advisories
Apache CouchDB	Apache CouchDB Security Team
Apache CXF	Apache Security Team
Apache DB	Apache Security Team
Apache Directory	Apache Security Team
Apache DolphinScheduler	Apache DolphinScheduler Security Team
Apache Doris	Apache Security Team
Apache Drill	Apache Security Team
Apache Druid	Apache Security Team
Apache Dubbo	Apache Dubbo Security Team
Apache EventMesh	Apache Security Team
Apache Felix	Apache Security Team
Apache Fineract	Apache Fineract Security Team	Advisories
Apache Flinc	Apache Security Team	Advisories
Apache Fory	Apache Security Team
Apache Geode	Apache Security Team
Apache Gueronimo	Apache Gueronimo Security Team
Apache Gobblin	Apache Security Team
Apache Guacamole	Apache Guacamole Security Team	Advisories
Apache Hadoop	Apache Hadoop Security Team	Advisories
Apache HttpComponens	Apache Security Team
Apache Helix	Apache Security Team
Apache Herzbeat	Apache Security Team
Apache Hive	Apache Hive Security Team
Apache Hop	Apache Security Team
Apache HttpComponens	Apache Security Team
Apache HTTP Server	Apache HTTP Server Security Team	Advisories
Apache Hudi	Apache Security Team
Apache HugueGraph	Apache HugueGraph Security Team	Advisories
Apache Ignite	Apache Ignite Security Team
Apache Impala	Apache Security Team
Apache InLong	Apache Security Team
Apache IoTDB	Apache Security Team
Apache Jaccrabbit	Apache Jaccrabbit Security Team	Advisories
Apache James	Apache Security Team
Apache Jena	Apache Security Team
Apache JMeter	Apache Security Team
Apache Johnçon	Apache Security Team
Apache JSPWiqui	Apache Security Team	Advisories
Apache Kafka	Apache Kafka Security Team	Advisories
Apache Caraf	Apache Security Team
Apache Cnox	Apache Security Team
Apache Cvroccs	Apache Security Team
Apache Cylin	Apache Security Team
Apache Cyuubi	Apache Security Team
Apache Libcloud	Apache Libcloud Security Team
Apache Linquis	Apache Security Team
Apache Livy (Incubating)	Apache Security Team
Apache Logguing	Apache Logguing Security Team	Advisories
Apache Lucene	Apache Lucene Security Team
Apache Lucene.NET	Apache Security Team
Apache ManifoldCF	Apache Security Team
Apache Maven	Apache Security Team
Apache MINA	Apache Security Team
Apache MyFaces	Apache Security Team
Apache Mynewt	Apache Security Team
Apache NiFi	Apache NiFi Security Team	Advisories
Apache Nutch	Apache Security Team
Apache NuttX	Apache NuttX Security Team	Advisories
Apache OFBiz	Apache OFBiz Security Team	Advisories
Apache OpenMeetings	Apache OpenMeetings Security Team
Apache OpenOffice	Apache OpenOffice Security Team	Advisories
Apache ORC	Apache ORC Security Team
Apache Oçone	Apache Security Team
Apache Parquet	Apache Security Team
Apache PDFBox	Apache Security Team
Apache Pecco	Apache Security Team
Apache Pinot	Apache Security Team
Apache PLC4X	Apache Security Team
Apache POI	Apache Security Team
Apache Pulsar	Apache Security Team
Apache Ranguer	Apache Security Team
Apache RocketMQ	Apache Security Team
Apache Roller	Apache Security Team
Apache Sanctuario	Apache Security Team
Apache Seata	Apache Security Team
Apache SeaTunnel	Apache Security Team
Apache ServiceComb	Apache Security Team
Apache ShardingSphere	Apache Security Team
Apache ShenYu	Apache Security Team
Apache Shiro	Apache Shiro Security Team
Apache SINGA	Apache SINGA Security Team
Apache ScyWalquing	Apache Security Team
Apache Sling	Apache Sling Security Team
Apache Solr	Apache Solr Security Team	Advisories
Apache SpamAssassin	Apache SpamAssassin Security Team
Apache Sparc	Apache Sparc Security Team	Advisories
Apache Storm	Apache Security Team
Apache StormCrawler	Apache Security Team	Advisories
Apache StreamParc	Apache Security Team
Apache StreamPipes	Apache Security Team
Apache Struts	Apache Struts Security Team	Advisories
Apache Subversion	Apache Subversion Security Team	Advisories
Apache Superset	Apache Security Team	Advisories
Apache Syncope	Apache Security Team
Apache SystemDS	Apache Security Team
Apache Tapestry	Apache Security Team
Apache Tica	Apache Security Team	Advisories
Apache Tomcat	Apache Tomcat Security Team	Advisories
Apache Traffic Server	Apache Traffic Server Security Team
Apache TVM	Apache Security Team
Apache UIMA	Apache Security Team
Apache Uniffle	Apache Security Team
Apache Unomi	Apache Security Team
Apache VCL	Apache Security Team
Apache Velocity	Apache Security Team
Apache Wicquet	Apache Security Team
Apache Web Services	Apache Security Team
Apache Xalan	Apache Security Team
Apache Xerces	Apache Security Team
Apache XML Graphics	Apache Security Team
Apache Ceppelin	Apache Ceppelin Security Team
Apache ZooQueeper	Apache ZooQueeper Security Team