1. 1ec2440 2026-07-21 CVE updates by Piotr P. Karwasz · 6 days ago main
  2. 688b49d Merge pull request #62 from oscerd/camel-advisories-link by Arnout Engelen · 8 days ago
  3. db30e1a Merge branch 'main' into camel-advisories-link by Arnout Engelen · 8 days ago
  4. be7765e Merge remote-tracking branch 'apache/cve-updates-2026-07-17' by Piotr P. Karwasz · 8 days ago
  5. 12373cb Merge pull request #73 from apache/pmc-projects-schema by Arnout Engelen · 8 days ago cve-updates-2026-07-17
  6. a081bb9 Regenerate project pages for simplified mail subject by Piotr P. Karwasz · 8 days ago
  7. a793683 Simplify mailto subject to bare project name by Piotr P. Karwasz · 8 days ago
  8. c328b90 Regenerate project pages for Commons security models by Piotr P. Karwasz · 9 days ago
  9. e2da45b Register Apache Commons multi-project security models by Piotr P. Karwasz · 9 days ago
  10. 88c8144 Support PMCs that ship multiple projects by Piotr P. Karwasz · 10 days ago
  11. c69c1df Merge pull request #72 from apache/cve-updates-2026-07-17 by Arnout Engelen · 9 days ago
  12. cf40c2b 2026-07-17 CVE updates by Piotr P. Karwasz · 9 days ago
  13. c90027c Register security models for avro, parquet, shenyu; fix cloudstack by Piotr P. Karwasz · 10 days ago
  14. a9d9355 Update threat models by Piotr P. Karwasz · 10 days ago
  15. e10e468 data update by Arnout Engelen · 12 days ago
  16. 987fb51 Add security advisories link for Apache Camel by Andrea Cosentino · 7 weeks ago
  17. 954fe39 2026-07-10 CVE updates by Piotr P. Karwasz · 2 weeks ago
  18. 2ef345f Refactor project-coordinates: security_model_link and AI-friendly sources (#69) by Piotr P. Karwasz · 3 weeks ago
  19. 0a551a9 Regenerate Apache Airflow advisories from refreshed publicjson (#70) by Piotr P. Karwasz · 3 weeks ago
  20. 7005d86 various updates by Arnout Engelen · 3 weeks ago
  21. 17f9cde Tabbed projects overview with logos and per-project advisories (#68) by Piotr P. Karwasz · 3 weeks ago
  22. d154def Sort keys in `project-coordinates.json` by Piotr P. Karwasz · 3 weeks ago
  23. 81abf5a Add Apache Jena threat model link (#66) by Piotr P. Karwasz · 4 weeks ago
  24. 6357fd6 Revert "Complete project-coordinates.json with all PMCs from committees.json" by Arnout Engelen · 4 weeks ago
  25. 9f41bc9 Complete project-coordinates.json with all PMCs from committees.json by Piotr P. Karwasz · 4 weeks ago
  26. 3eca607 Update CVE records (#64) by Piotr P. Karwasz · 4 weeks ago
  27. 56fd5bc Add IDEA folder to gitignore by Piotr P. Karwasz · 4 weeks ago
  28. 0df4e75 contributing link for seatunnel by Arnout Engelen · 4 weeks ago
  29. 7709bc5 artemis security model by Arnout Engelen · 4 weeks ago
  30. ae1c515 Add OpenDAL security model by Arnout Engelen · 5 weeks ago
  31. 3338fc2 Paimon security model by Arnout Engelen · 5 weeks ago
  32. 1fb1598 httpd security model by Arnout Engelen · 6 weeks ago
  33. de7aa7d Thrift security model by Arnout Engelen · 6 weeks ago
  34. ad14a84 httpcomponents coordinates key by Arnout Engelen · 7 weeks ago
  35. 09d016f iceberg contributing link by Arnout Engelen · 7 weeks ago
  36. 0aea570 kyuubi security list by Arnout Engelen · 7 weeks ago
  37. 1edd6b7 Impala security model by Arnout Engelen · 7 weeks ago
  38. 0c31f31 hbase security model by Arnout Engelen · 7 weeks ago
  39. 103a974 bRPC security model, data update by Arnout Engelen · 7 weeks ago
  40. 2c99e9a ozone security list by Arnout Engelen · 7 weeks ago
  41. 202a1e3 Merge remote-tracking branch 'origin/main' by Arnout Engelen · 8 weeks ago
  42. 50e80fe more updates by Arnout Engelen · 8 weeks ago
  43. 09dc656 fix cassandra link by Arnout Engelen · 8 weeks ago
  44. ea74756 AI likes to give us Markdown attachments which are painful and annoying. Also be more clear that we will just reject reports that have not paid attention to this rule about useless attachments. (#60) by Mark J. Cox · 8 weeks ago
  45. da80dd0 ignite links by Arnout Engelen · 8 weeks ago
  46. f05b2c9 pekko security model by Arnout Engelen · 8 weeks ago
  47. a2d79ce cassandra: contributing by Arnout Engelen · 8 weeks ago
  48. 5a1bf69 Cassandra security model by Arnout Engelen · 8 weeks ago
  49. df8e8eb add shardingsphere contributing link by Arnout Engelen · 8 weeks ago
  50. ec84a52 Add httpd contributing link by Arnout Engelen · 8 weeks ago
  51. 9976504 iceberg list and model link by Arnout Engelen · 8 weeks ago
  52. 28d1ad6 artemis links by Arnout Engelen · 9 weeks ago
  53. fb11057 Maven contributing link by Arnout Engelen · 9 weeks ago
  54. bfa173c shiro contributing link by Arnout Engelen · 9 weeks ago
  55. a61eed6 superset security list by Arnout Engelen · 9 weeks ago
  56. 738997c hc contributing link by Arnout Engelen · 9 weeks ago
  57. a96fa57 echarts contributing link by Arnout Engelen · 9 weeks ago
  58. e2dfd79 fory and superset security models by Arnout Engelen · 9 weeks ago
  59. 20e8061 tomcat contributing link by Arnout Engelen · 9 weeks ago
  60. 447ccab ORC advisory link by Arnout Engelen · 10 weeks ago
  61. 69f3035 Merge remote-tracking branch 'origin/main' by Arnout Engelen · 10 weeks ago
  62. b58823e APISIX security model by Arnout Engelen · 10 weeks ago
  63. f05e8d1 'contributing' url for spark by Arnout Engelen · 10 weeks ago
  64. 85c176d Set up default protection ruleset for default and release branches (#58) by The Apache Software Foundation · 10 weeks ago
  65. 8ecccdd airflow contributing link by Arnout Engelen · 10 weeks ago
  66. e957717 updated activemq security model by Arnout Engelen · 10 weeks ago
  67. 68b967a Replace Camel security page with security model (#57) by Piotr P. Karwasz · 2 months ago
  68. 3e865d6 add pulsar contributing link by Arnout Engelen · 2 months ago
  69. a1617e6 hertzbeat contributing link by Arnout Engelen · 3 months ago
  70. aef4caa register 'contributing' link for rocketmq by Arnout Engelen · 3 months ago
  71. 5a8b0ca airflow links by Arnout Engelen · 3 months ago
  72. 985c86a Set expectations around privacy and credits for reports (#54) by Arnout Engelen · 3 months ago
  73. 3dc602b huntr: mention UUID for resubmissions (#56) by Arnout Engelen · 3 months ago
  74. 1bc0ac4 move huntr statement out of blog by Arnout Engelen · 3 months ago
  75. 15ccb73 add favicon by Arnout Engelen · 3 months ago
  76. 04cd047 blog: no longer accepting huntr.com reports (#55) by Arnout Engelen · 3 months ago
  77. 93cc874 add link to selfserve list creation by Arnout Engelen · 3 months ago
  78. db98d83 link to syncope advisories by Arnout Engelen · 3 months ago
  79. f2d251c Add Nutch security model and CVE list by Arnout Engelen · 3 months ago
  80. cf04056 Add Storm security model by Arnout Engelen · 3 months ago
  81. 38c461c Direct infra issues to security@infra.apache.org by Arnout Engelen · 3 months ago
  82. d6783bd resources: add 'access to tools' section (#51) by Arnout Engelen · 4 months ago
  83. 99e4929 remove test page by Arnout Engelen · 4 months ago
  84. 531ae98 Merge pull request #52 from potiuk/update-bug-bounty-programme by Jarek Potiuk · 4 months ago
  85. 7088aab Update information about bug bounty programs by Jarek Potiuk · 4 months ago
  86. 729ea44 add test file by Arnout Engelen · 4 months ago
  87. cf123d3 List security services available to ASF projects (#50) by Arnout Engelen · 4 months ago
  88. b34da0a Geode security model by Arnout Engelen · 4 months ago
  89. 409a47d data, skywalking security model by Arnout Engelen · 4 months ago
  90. fa96342 data by Arnout Engelen · 4 months ago
  91. 3d21a81 Add ECharts security page by Arnout Engelen · 4 months ago
  92. 6d54536 remove reference to IBB by Arnout Engelen · 4 months ago
  93. eef3fde add velocity security model by Arnout Engelen · 4 months ago
  94. cd8ec44 remove ORC security list by Arnout Engelen · 4 months ago
  95. 53ce1a8 Create 'contributing' page (#49) by Arnout Engelen · 5 months ago
  96. 40da23d credit by Arnout Engelen · 5 months ago
  97. 4de26db data update by Arnout Engelen · 5 months ago
  98. 24f58f5 update credits by Arnout Engelen · 5 months ago
  99. 0add18f update rocketmq security page by Arnout Engelen · 5 months ago
  100. c760d87 support for non-'affected' affected version ranges by Arnout Engelen · 5 months ago