The Apache OFBiz security page is https://ofbiz.apache.org/security.html.