Apache Project Security Information

Security information for individual Apache projects

Here is a list of pages ASF projects maintain to provide information on known security vulnerabilities. Each entry also has the security contact for reporting new vulnerabilities related to that project. Note that not all project security teams have a dedicated address for reporting new vulnerabilities.

To report a vulnerability in an Apache project that is not listed below, contact the Apache Security Team.

Project security page Contact
Apache Accumulo Apache Security Team
Apache ActiveMQ Apache Security Team Advisories
Apache AGE Apache Security Team
Apache Airavata Apache Security Team
Apache Airflow Apache Security Team
Apache Allura Apache Security Team
Apache Ambari Apache Ambari Security Team
Apache Answer (Incubating) Apache Security Team
Apache Ant Apache Security Team
Apache APISIX Apache Security Team
Apache Portable Runtime (APR) Apache Security Team
Apache Arrow Apache Security Team
Apache AsterixDB Apache Security Team
Apache Atlas Apache Security Team
Apache Avro Apache Security Team
Apache Axis Apache Security Team
Apache BookKeeper Apache Security Team
Apache bRPC Apache Security Team
Apache Calcite Apache Security Team
Apache Camel Apache Security Team Advisories
Apache Cassandra Apache Security Team
Apache Cayenne Apache Security Team
Apache CloudStack Apache Security Team
Apache Cocoon Apache Security Team
Apache Commons Apache Commons Security Team Advisories
Apache CouchDB Apache CouchDB Security Team
Apache CXF Apache Security Team
Apache DB Apache Security Team
Apache Directory Apache Security Team
Apache DolphinScheduler Apache Security Team
Apache Doris Apache Security Team
Apache Druid Apache Security Team
Apache Dubbo Apache Dubbo Security Team
Apache EventMesh Apache Security Team
Apache Felix Apache Security Team
Apache Fineract Apache Fineract Security Team
Apache Flink Apache Security Team Advisories
Apache Geode Apache Security Team
Apache Geronimo Apache Geronimo Security Team
Apache Pulsar Apache Security Team
Apache Gobblin Apache Security Team
Apache Guacamole Apache Guacamole Security Team Advisories
Apache Hadoop Apache Hadoop Security Team Advisories
Apache Helix Apache Security Team
Apache Hive Apache Hive Security Team
Apache HTTP Server Apache HTTP Server Security Team Advisories
Apache Ignite Apache Ignite Security Team
Apache Impala Apache Security Team
Apache InLong Apache Security Team
Apache IoTDB Apache Security Team
Apache Jackrabbit Apache Jackrabbit Security Team
Apache James Apache Security Team
Apache Jena Apache Security Team
Apache JMeter Apache Security Team
Apache Johnzon Apache Security Team
Apache JSPWiki Apache Security Team Advisories
Apache Kafka Apache Kafka Security Team Advisories
Apache Karaf Apache Security Team
Apache Knox Apache Security Team
Apache Kylin Apache Security Team
Apache Libcloud Apache Libcloud Security Team
Apache Linkis Apache Security Team
Apache Livy (Incubating) Apache Security Team
Apache Logging Apache Logging Security Team
Apache Lucene Apache Lucene Security Team
Apache ManifoldCF Apache Security Team
Apache Maven Apache Security Team
Apache MINA Apache Security Team
Apache MyFaces Apache Security Team
Apache NiFi Apache NiFi Security Team Advisories
Apache Nutch Apache Security Team
Apache NuttX Apache Security Team
Apache OFBiz Apache OFBiz Security Team
Apache Oozie Apache Security Team
Apache OpenMeetings Apache OpenMeetings Security Team
Apache OpenOffice Apache OpenOffice Security Team Advisories
Apache ORC Apache ORC Security Team
Apache Ozone Apache Security Team
Apache Parquet Apache Security Team
Apache PDFBox Apache Security Team
Apache Pinot Apache Security Team
Apache PLC4X Apache Security Team
Apache POI Apache Security Team
Apache Portals Apache Security Team
Apache Pulsar Apache Security Team
Apache Ranger Apache Security Team
Apache RocketMQ Apache Security Team
Apache Roller Apache Security Team
Apache Santuario Apache Security Team
Apache SeaTunnel Apache Security Team
Apache ServiceComb Apache Security Team
Apache ShardingSphere Apache Security Team
Apache ShenYu Apache Security Team
Apache Shiro Apache Shiro Security Team
Apache SINGA Apache SINGA Security Team
Apache SkyWalking Apache Security Team
Apache Sling Apache Sling Security Team
Apache Solr Apache Solr Security Team Advisories
Apache SpamAssassin Apache SpamAssassin Security Team
Apache Spark Apache Spark Security Team Advisories
Apache Storm Apache Security Team
Apache StreamPark (Incubating) Apache Security Team
Apache StreamPipes Apache Security Team
Apache Struts Apache Struts Security Team Advisories
Apache Submarine Apache Security Team
Apache Subversion Apache Subversion Security Team Advisories
Apache Superset Apache Security Team Advisories
Apache SystemDS Apache Security Team
Apache Tapestry Apache Security Team
Apache Tika Apache Security Team
Apache Tomcat Apache Tomcat Security Team Advisories
Apache Traffic Control Apache Traffic Control Security Team
Apache Traffic Server Apache Traffic Server Security Team
Apache UIMA Apache Security Team
Apache Unomi Apache Security Team
Apache Velocity Apache Security Team
Apache Wicket Apache Security Team
Apache Web Services Apache Security Team
Apache Xalan Apache Security Team
Apache Xerces Apache Security Team
Apache XML Graphics Apache Security Team
Apache Zeppelin Apache Zeppelin Security Team
Apache ZooKeeper Apache ZooKeeper Security Team