The Apache Gravitino project follows the standard processes as set out by the ASF security team.
Please report any security issues to private@gravitino.apache.org with Cc to security@apache.org.