| # Security Policy |
| |
| ## Supported Versions |
| |
| To see which versions of Apache Camel are supported please refer to this [page](https://camel.apache.org/download/). |
| |
| ## Reporting a Vulnerability |
| |
| For information on how to report a new security problem please see [here](https://camel.apache.org/security/). |
| |
| ## Security Model |
| |
| Before submitting a report, please read the project's |
| [Security Model](docs/user-manual/modules/ROOT/pages/security-model.adoc). It documents who is |
| trusted, where the trust boundaries sit, which vulnerability classes the Camel PMC accepts, and |
| which categories are out of scope (route-author or operator responsibility, explicit opt-ins, |
| DoS through unthrottled routes, third-party transitive CVEs not reachable through Camel code, |
| etc.). Reports outside the documented scope will be closed with a reference to that page. |
