| <!-- |
| Licensed to the Apache Software Foundation (ASF) under one or more |
| contributor license agreements. See the NOTICE file distributed with |
| this work for additional information regarding copyright ownership. |
| The ASF licenses this file to You under the Apache License, Version 2.0 |
| (the "License"); you may not use this file except in compliance with |
| the License. You may obtain a copy of the License at |
| |
| https://www.apache.org/licenses/LICENSE-2.0 |
| |
| Unless required by applicable law or agreed to in writing, software |
| distributed under the License is distributed on an "AS IS" BASIS, |
| WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| See the License for the specific language governing permissions and |
| limitations under the License. |
| --> |
| |
| # Apache Commons Secure XML Security |
| |
| For information about reporting or asking questions about security, |
| please see [Apache Commons Security](https://commons.apache.org/security.html). |
| |
| This page lists all security vulnerabilities fixed in released versions of this component. |
| |
| Please note that binary patches are never provided. |
| If you need to apply a source code patch, |
| use the building instructions for the component version that you are using. |
| |
| If you need help on building this component, |
| or other help on following the instructions to mitigate the known vulnerabilities listed here, |
| please send your questions to the public [user mailing list](mail-lists.html). |
| |
| If you have encountered an unlisted security vulnerability or other unexpected behavior that has security impact, |
| or if the descriptions here are incomplete, |
| please report them privately to the Apache Security Team. |
| Thank you. |
| |
| ## Supported Versions |
| |
| Security fixes are applied to the **1.x** release line. |
| |
| ## Security Model |
| |
| This section amends the [Apache Commons security model](https://commons.apache.org/security.html#Security_Model) for this component. |
| |
| Read the [Apache Commons Secure XML Threat Model](threat_model.html): |
| it states what the securing guarantees, |
| what falls outside it, |
| and the disposition a report receives. |
| |
| ## Security Vulnerabilities |
| |
| None. |
| |
| ## Safe Deserialization |
| |
| For information about safe deserialization, |
| please see [Safe Deserialization](https://commons.apache.org/io/description.html#Safe_Deserialization). |
