Here is a list of pages ASF projects maintain to provide information on known security vulnerabilities. Each entry also has the security contact for reporting new vulnerabilities related to that project. Note that not all project security teams have a dedicated address for reporting new vulnerabilities.
To report a vulnerability in an Apache project that is not listed below, contact the Apache Security Team.
| Project security page | Contact | | | --- | --- | --- || Apache AGE | Apache Security Team | [Advisories](projects/Apache AGE) | Apache Airflow | Apache Security Team | [Advisories](projects/Apache Airflow) | Apache Ambari | Apache Ambari Security Team |
| Apache Ant | Apache Security Team |
| Apache Portable Runtime (APR) | Apache Security Team | [Advisories](projects/Apache Portable Runtime (APR)) | Apache Archiva | Apache Security Team | [Advisories](projects/Apache Archiva) | Apache Atlas | Apache Security Team | [Advisories](projects/Apache Atlas) | Apache BookKeeper | Apache Security Team | [Advisories](projects/Apache BookKeeper) | Apache Camel | Apache Security Team |
| Apache CloudStack | Apache Security Team |
| Apache Commons | Apache Commons Security Team | [Advisories](projects/Apache Commons) | Apache CouchDB | Apache CouchDB Security Team | [Advisories](projects/Apache CouchDB) | Apache SpamAssassin | Apache SpamAssassin Security Team |
| Apache CXF | Apache Security Team | [Advisories](projects/Apache CXF) | Apache Directory | Apache Security Team | [Advisories](projects/Apache Directory) | Apache DolphinScheduler | Apache Security Team | [Advisories](projects/Apache DolphinScheduler) | Apache Dubbo | Apache Security Team | [Advisories](projects/Apache Dubbo) | Apache Fineract | Apache Security Team | [Advisories](projects/Apache Fineract) | Apache Geronimo | Apache Geronimo Security Team |
| Apache Pulsar | Apache Security Team |
| Apache Guacamole | Apache Guacamole Security Team |
| Apache Hadoop | Apache Hadoop Security Team |
| Apache Helix | Apache Security Team | [Advisories](projects/Apache Helix) | Apache Hive | Apache Hive Security Team |
| Apache HTTP Server | Apache HTTP Server Security Team | [Advisories](projects/Apache HTTP Server) | Apache Ignite | Apache Ignite Security Team |
| Apache InLong | Apache Security Team | [Advisories](projects/Apache InLong) | Apache IoTDB | Apache Security Team | [Advisories](projects/Apache IoTDB) | Apache Jackrabbit | Apache Jackrabbit Security Team |
| Apache James | Apache Security Team | [Advisories](projects/Apache James) | Apache Jena | Apache Security Team | [Advisories](projects/Apache Jena) | Apache JMeter | Apache Security Team |
| Apache Kafka | Apache Kafka Security Team | [Advisories](projects/Apache Kafka) | Apache Karaf | Apache Security Team | [Advisories](projects/Apache Karaf) | Apache Kylin | Apache Security Team | [Advisories](projects/Apache Kylin) | Apache Libcloud | Apache Libcloud Security Team |
| Apache Linkis | Apache Security Team | [Advisories](projects/Apache Linkis) | Apache Logging | Apache Logging Security Team | [Advisories](projects/Apache Logging) | Apache Lucene | Apache Lucene Security Team |
| Apache ManifoldCF | Apache Security Team | [Advisories](projects/Apache ManifoldCF) | Apache Maven | Apache Security Team |
| Apache Metron | Apache Metron Security Team |
| Apache NiFi | Apache NiFi Security Team | [Advisories](projects/Apache NiFi) | Apache OFBiz | Apache OFBiz Security Team | [Advisories](projects/Apache OFBiz) | Apache OpenMeetings | Apache OpenMeetings Security Team | [Advisories](projects/Apache OpenMeetings) | Apache OpenOffice | Apache OpenOffice Security Team | [Advisories](projects/Apache OpenOffice) | Apache ORC | Apache ORC Security Team |
| Apache Ranger | Apache Security Team | [Advisories](projects/Apache Ranger) | Apache Santuario | Apache Security Team |
| Apache ShardingSphere | Apache Security Team | [Advisories](projects/Apache ShardingSphere) | Apache ShenYu | Apache Security Team | [Advisories](projects/Apache ShenYu) | Apache Shiro | Apache Shiro Security Team | [Advisories](projects/Apache Shiro) | Apache SINGA | Apache SINGA Security Team |
| Apache Sling | Apache Sling Security Team | [Advisories](projects/Apache Sling) | Apache Spark | Apache Spark Security Team | [Advisories](projects/Apache Spark) | Apache StreamPark (Incubating) | Apache Security Team | [Advisories](projects/Apache StreamPark (Incubating)) | Apache Struts | Apache Struts Security Team |
| Apache Subversion | Apache Subversion Security Team |
| Apache Superset | Apache Security Team | [Advisories](projects/Apache Superset) | Apache Tomcat | Apache Tomcat Security Team | [Advisories](projects/Apache Tomcat) | Apache Traffic Control | Apache Traffic Control Security Team |
| Apache Traffic Server | Apache Traffic Server Security Team | [Advisories](projects/Apache Traffic Server) | Apache Trafodion | Apache Trafodion Security Team |
| Apache UIMA | Apache Security Team | [Advisories](projects/Apache UIMA) | Apache XML Graphics | Apache Security Team |
| Apache Zeppelin | Apache Zeppelin Security Team | [Advisories](projects/Apache Zeppelin) | Apache ZooKeeper | Apache ZooKeeper Security Team |