Apache Project Security Information

Here is a list of pages ASF projects maintain to provide information on known security vulnerabilities. Each entry also has the security contact for reporting new vulnerabilities related to that project. Note that not all project security teams have a dedicated address for reporting new vulnerabilities.

To report a vulnerability in an Apache project that is not listed below, contact the Apache Security Team.

Project security page	Contact
Apache Accumulo	Apache Security Team
Apache ActiveMQ	Apache Security Team	Advisories
Apache AGE	Apache Security Team
Apache Airavata	Apache Security Team
Apache Airflow	Apache Security Team
Apache Allura	Apache Security Team
Apache Ambari	Apache Ambari Security Team
Apache Answer	Apache Security Team	Advisories
Apache Ant	Apache Security Team
Apache APISIX	Apache Security Team
Apache Portable Runtime (APR)	Apache Security Team
Apache Arrow	Apache Security Team
Apache AsterixDB	Apache Security Team
Apache Atlas	Apache Security Team
Apache Avro	Apache Security Team
Apache Axis	Apache Security Team
Apache Baremaps	Apache Security Team
Apache BookKeeper	Apache Security Team
Apache bRPC	Apache Security Team
Apache Calcite	Apache Security Team
Apache Camel	Apache Security Team	Advisories
Apache Carbondata	Apache Security Team
Apache Cassandra	Apache Security Team
Apache Cayenne	Apache Security Team
Apache CloudStack	Apache Security Team
Apache Commons	Apache Commons Security Team	Advisories
Apache CouchDB	Apache CouchDB Security Team
Apache CXF	Apache Security Team
Apache DB	Apache Security Team
Apache Directory	Apache Security Team
Apache DolphinScheduler	Apache DolphinScheduler Security Team
Apache Doris	Apache Security Team
Apache Drill	Apache Security Team
Apache Druid	Apache Security Team
Apache Dubbo	Apache Dubbo Security Team
Apache EventMesh	Apache Security Team
Apache Felix	Apache Security Team
Apache Fineract	Apache Fineract Security Team
Apache Flink	Apache Security Team	Advisories
Apache Fory	Apache Security Team
Apache Geode	Apache Security Team
Apache Geronimo	Apache Geronimo Security Team
Apache Gobblin	Apache Security Team
Apache Guacamole	Apache Guacamole Security Team	Advisories
Apache Hadoop	Apache Hadoop Security Team	Advisories
Apache HttpComponents	Apache Security Team
Apache Helix	Apache Security Team
Apache Hertzbeat	Apache Security Team
Apache Hive	Apache Hive Security Team
Apache Hop	Apache Security Team
Apache HttpComponents	Apache Security Team
Apache HTTP Server	Apache HTTP Server Security Team	Advisories
Apache HugeGraph	Apache Security Team	Advisories
Apache Ignite	Apache Ignite Security Team
Apache Impala	Apache Security Team
Apache InLong	Apache Security Team
Apache IoTDB	Apache Security Team
Apache Jackrabbit	Apache Jackrabbit Security Team	Advisories
Apache James	Apache Security Team
Apache Jena	Apache Security Team
Apache JMeter	Apache Security Team
Apache Johnzon	Apache Security Team
Apache JSPWiki	Apache Security Team	Advisories
Apache Kafka	Apache Kafka Security Team	Advisories
Apache Karaf	Apache Security Team
Apache Knox	Apache Security Team
Apache Kvrocks	Apache Security Team
Apache Kylin	Apache Security Team
Apache Libcloud	Apache Libcloud Security Team
Apache Linkis	Apache Security Team
Apache Livy (Incubating)	Apache Security Team
Apache Logging	Apache Logging Security Team	Advisories
Apache Lucene	Apache Lucene Security Team
Apache Lucene.NET	Apache Security Team
Apache ManifoldCF	Apache Security Team
Apache Maven	Apache Security Team
Apache MINA	Apache Security Team
Apache MyFaces	Apache Security Team
Apache Mynewt	Apache Security Team
Apache NiFi	Apache NiFi Security Team	Advisories
Apache Nutch	Apache Security Team
Apache NuttX	Apache Security Team
Apache OFBiz	Apache OFBiz Security Team	Advisories
Apache OpenMeetings	Apache OpenMeetings Security Team
Apache OpenOffice	Apache OpenOffice Security Team	Advisories
Apache ORC	Apache ORC Security Team
Apache Ozone	Apache Security Team
Apache Parquet	Apache Security Team
Apache PDFBox	Apache Security Team
Apache Pekko	Apache Security Team
Apache Pinot	Apache Security Team
Apache PLC4X	Apache Security Team
Apache POI	Apache Security Team
Apache Portals	Apache Security Team
Apache Pulsar	Apache Security Team
Apache Ranger	Apache Security Team
Apache RocketMQ	Apache Security Team
Apache Roller	Apache Security Team
Apache Santuario	Apache Security Team
Apache Seata	Apache Security Team
Apache SeaTunnel	Apache Security Team
Apache ServiceComb	Apache Security Team
Apache ShardingSphere	Apache Security Team
Apache ShenYu	Apache Security Team
Apache Shiro	Apache Shiro Security Team
Apache SINGA	Apache SINGA Security Team
Apache SkyWalking	Apache Security Team
Apache Sling	Apache Sling Security Team
Apache Solr	Apache Solr Security Team	Advisories
Apache SpamAssassin	Apache SpamAssassin Security Team
Apache Spark	Apache Spark Security Team	Advisories
Apache Storm	Apache Security Team
Apache StormCrawler	Apache Security Team	Advisories
Apache StreamPark	Apache Security Team
Apache StreamPipes	Apache Security Team
Apache Struts	Apache Struts Security Team	Advisories
Apache Subversion	Apache Subversion Security Team	Advisories
Apache Superset	Apache Security Team	Advisories
Apache Syncope	Apache Security Team
Apache SystemDS	Apache Security Team
Apache Tapestry	Apache Security Team
Apache Tika	Apache Security Team	Advisories
Apache Tomcat	Apache Tomcat Security Team	Advisories
Apache Traffic Control	Apache Traffic Control Security Team
Apache Traffic Server	Apache Traffic Server Security Team
Apache TVM	Apache Security Team
Apache UIMA	Apache Security Team
Apache Unomi	Apache Security Team
Apache VCL	Apache Security Team
Apache Velocity	Apache Security Team
Apache Wicket	Apache Security Team
Apache Web Services	Apache Security Team
Apache Xalan	Apache Security Team
Apache Xerces	Apache Security Team
Apache XML Graphics	Apache Security Team
Apache Zeppelin	Apache Zeppelin Security Team
Apache ZooKeeper	Apache ZooKeeper Security Team