Apache Logo
The Apache Way Contribute ASF Sponsors

ASF Project Security Information

Pages maintained by ASF projects to provide information on known security vulnerabilities are listed below. The security contact for reporting new vulnerabilities is also shown. Note that whilst all projects have a security team, not all project security teams have a dedicated address for reporting new vulnerabilities.

To report a vulnerability in an Apache project that is not listed below, please contact the Apache Security Team.

Apache project security page Security Contact
Apache Portable Runtime (APR) Apache Security Team
Apache Ant Apache Security Team
Apache Apex Apache Apex Security Team
Apache CloudStack Apache CloudStack Security Team
Apache Commons Apache Security Team
Apache CouchDB Apache CouchDB Security Team
Apache Geronimo Apache Geronimo Security Team
Apache Guacamole Apache Guacamole Security Team
Apache Hadoop Apache Hadoop Security Team
Apache Hive Apache Hive Security Team
Apache HTTP Server Apache HTTP Server Security Team
Apache Ignite Apache Ignite Security Team
Apache Jackrabbit Apache Jackrabbit Security Team
Apache Kafka Apache Kafka Security Team
Apache Libcloud Apache Libcloud Security Team
Apache Metron Apache Metron Security Team
Apache NiFi Apache NiFi Security Team
Apache OFBiz Apache OFBiz Security Team
Apache OpenMeetings Apache OpenMeetings Security Team
Apache OpenOffice Apache OpenOffice Security Team
Apache ORC Apache ORC Security Team
Apache Sentry Apache Sentry Security Team
Apache SpamAssassin Apache SpamAssassin Security Team
Apache Shiro Apache Shiro Security Team
Apache Sling Apache Sling Security Team
Apache Spark Apache Security Team
Apache Struts Apache Struts Security Team
Apache Tomcat Apache Tomcat Security Team
Apache Traffic Control Apache Traffic Control Security Team
Apache Traffic Server Apache Traffic Server Security Team
Apache Trafodion Apache Trafodion Security Team
Apache Zeppelin Apache Zeppelin Security Team
Apache ZooKeeper Apache ZooKeeper Security Team