1. 2d64616 Merge pull request #83 from apache/add-syncope-threat-model by Arnout Engelen · 6 days ago main
  2. 0a59786 Merge pull request #82 from apache/cve-updates-2026-08-10 by Arnout Engelen · 6 days ago
  3. 08af9a6 Add Syncope threat model by Piotr P. Karwasz · 6 days ago
  4. 4e2087b CVE updates from 2026-08-03 through 2026-08-10 by Piotr P. Karwasz · 6 days ago
  5. 81f992e Add coordinates for 24 podlings, mark BifroMQ and Seata incubating by Piotr P. Karwasz · 6 days ago
  6. c2490da Warn about projects missing security coordinates by Piotr P. Karwasz · 6 days ago
  7. bce87b2 Add BifroMQ threat model (#81) by Piotr P. Karwasz · 14 days ago
  8. 1fcf35e Delete head branches after a PR is merged (#80) by Piotr P. Karwasz · 14 days ago
  9. baf3bc1 Send repository notifications to commits@security.apache.org (#79) by Piotr P. Karwasz · 14 days ago
  10. d300ee1 CVE updates from 2026-07-30 through 2026-07-31 (#78) by Piotr P. Karwasz · 2 weeks ago
  11. def829c Add Calcite threat model (#75) by Piotr P. Karwasz · 2 weeks ago
  12. 46dffe9 Clarify reporting instructions in report-code.md (#76) by Piotr P. Karwasz · 3 weeks ago
  13. fb3ba8c CVE updates from 2026-07-27 through 2026-07-29 (#77) by Piotr P. Karwasz · 3 weeks ago
  14. 6354002 Fix disclosure order by Piotr P. Karwasz · 3 weeks ago
  15. a052793 Threat model and CVE updates up to 2026-07-26 by Piotr P. Karwasz · 3 weeks ago
  16. 035c653 Add and correct verified threat-model links in project-coordinates.json (#74) by Jarek Potiuk · 3 weeks ago
  17. 1ec2440 2026-07-21 CVE updates by Piotr P. Karwasz · 4 weeks ago
  18. 688b49d Merge pull request #62 from oscerd/camel-advisories-link by Arnout Engelen · 4 weeks ago
  19. db30e1a Merge branch 'main' into camel-advisories-link by Arnout Engelen · 4 weeks ago
  20. be7765e Merge remote-tracking branch 'apache/cve-updates-2026-07-17' by Piotr P. Karwasz · 4 weeks ago
  21. 12373cb Merge pull request #73 from apache/pmc-projects-schema by Arnout Engelen · 4 weeks ago
  22. a081bb9 Regenerate project pages for simplified mail subject by Piotr P. Karwasz · 4 weeks ago
  23. a793683 Simplify mailto subject to bare project name by Piotr P. Karwasz · 4 weeks ago
  24. c328b90 Regenerate project pages for Commons security models by Piotr P. Karwasz · 4 weeks ago
  25. e2da45b Register Apache Commons multi-project security models by Piotr P. Karwasz · 4 weeks ago
  26. 88c8144 Support PMCs that ship multiple projects by Piotr P. Karwasz · 4 weeks ago
  27. c69c1df Merge pull request #72 from apache/cve-updates-2026-07-17 by Arnout Engelen · 4 weeks ago
  28. cf40c2b 2026-07-17 CVE updates by Piotr P. Karwasz · 4 weeks ago
  29. c90027c Register security models for avro, parquet, shenyu; fix cloudstack by Piotr P. Karwasz · 4 weeks ago
  30. a9d9355 Update threat models by Piotr P. Karwasz · 4 weeks ago
  31. e10e468 data update by Arnout Engelen · 5 weeks ago
  32. 987fb51 Add security advisories link for Apache Camel by Andrea Cosentino · 10 weeks ago
  33. 954fe39 2026-07-10 CVE updates by Piotr P. Karwasz · 5 weeks ago
  34. 2ef345f Refactor project-coordinates: security_model_link and AI-friendly sources (#69) by Piotr P. Karwasz · 6 weeks ago
  35. 0a551a9 Regenerate Apache Airflow advisories from refreshed publicjson (#70) by Piotr P. Karwasz · 6 weeks ago
  36. 7005d86 various updates by Arnout Engelen · 6 weeks ago
  37. 17f9cde Tabbed projects overview with logos and per-project advisories (#68) by Piotr P. Karwasz · 6 weeks ago
  38. d154def Sort keys in `project-coordinates.json` by Piotr P. Karwasz · 6 weeks ago
  39. 81abf5a Add Apache Jena threat model link (#66) by Piotr P. Karwasz · 7 weeks ago
  40. 6357fd6 Revert "Complete project-coordinates.json with all PMCs from committees.json" by Arnout Engelen · 7 weeks ago
  41. 9f41bc9 Complete project-coordinates.json with all PMCs from committees.json by Piotr P. Karwasz · 7 weeks ago
  42. 3eca607 Update CVE records (#64) by Piotr P. Karwasz · 7 weeks ago
  43. 56fd5bc Add IDEA folder to gitignore by Piotr P. Karwasz · 7 weeks ago
  44. 0df4e75 contributing link for seatunnel by Arnout Engelen · 7 weeks ago
  45. 7709bc5 artemis security model by Arnout Engelen · 7 weeks ago
  46. ae1c515 Add OpenDAL security model by Arnout Engelen · 8 weeks ago
  47. 3338fc2 Paimon security model by Arnout Engelen · 8 weeks ago
  48. 1fb1598 httpd security model by Arnout Engelen · 9 weeks ago
  49. de7aa7d Thrift security model by Arnout Engelen · 9 weeks ago
  50. ad14a84 httpcomponents coordinates key by Arnout Engelen · 10 weeks ago
  51. 09d016f iceberg contributing link by Arnout Engelen · 10 weeks ago
  52. 0aea570 kyuubi security list by Arnout Engelen · 10 weeks ago
  53. 1edd6b7 Impala security model by Arnout Engelen · 10 weeks ago
  54. 0c31f31 hbase security model by Arnout Engelen · 10 weeks ago
  55. 103a974 bRPC security model, data update by Arnout Engelen · 2 months ago
  56. 2c99e9a ozone security list by Arnout Engelen · 2 months ago
  57. 202a1e3 Merge remote-tracking branch 'origin/main' by Arnout Engelen · 2 months ago
  58. 50e80fe more updates by Arnout Engelen · 2 months ago
  59. 09dc656 fix cassandra link by Arnout Engelen · 2 months ago
  60. ea74756 AI likes to give us Markdown attachments which are painful and annoying. Also be more clear that we will just reject reports that have not paid attention to this rule about useless attachments. (#60) by Mark J. Cox · 2 months ago
  61. da80dd0 ignite links by Arnout Engelen · 2 months ago
  62. f05b2c9 pekko security model by Arnout Engelen · 3 months ago
  63. a2d79ce cassandra: contributing by Arnout Engelen · 3 months ago
  64. 5a1bf69 Cassandra security model by Arnout Engelen · 3 months ago
  65. df8e8eb add shardingsphere contributing link by Arnout Engelen · 3 months ago
  66. ec84a52 Add httpd contributing link by Arnout Engelen · 3 months ago
  67. 9976504 iceberg list and model link by Arnout Engelen · 3 months ago
  68. 28d1ad6 artemis links by Arnout Engelen · 3 months ago
  69. fb11057 Maven contributing link by Arnout Engelen · 3 months ago
  70. bfa173c shiro contributing link by Arnout Engelen · 3 months ago
  71. a61eed6 superset security list by Arnout Engelen · 3 months ago
  72. 738997c hc contributing link by Arnout Engelen · 3 months ago
  73. a96fa57 echarts contributing link by Arnout Engelen · 3 months ago
  74. e2dfd79 fory and superset security models by Arnout Engelen · 3 months ago
  75. 20e8061 tomcat contributing link by Arnout Engelen · 3 months ago
  76. 447ccab ORC advisory link by Arnout Engelen · 3 months ago
  77. 69f3035 Merge remote-tracking branch 'origin/main' by Arnout Engelen · 3 months ago
  78. b58823e APISIX security model by Arnout Engelen · 3 months ago
  79. f05e8d1 'contributing' url for spark by Arnout Engelen · 3 months ago
  80. 85c176d Set up default protection ruleset for default and release branches (#58) by The Apache Software Foundation · 3 months ago
  81. 8ecccdd airflow contributing link by Arnout Engelen · 3 months ago
  82. e957717 updated activemq security model by Arnout Engelen · 3 months ago
  83. 68b967a Replace Camel security page with security model (#57) by Piotr P. Karwasz · 3 months ago
  84. 3e865d6 add pulsar contributing link by Arnout Engelen · 3 months ago
  85. a1617e6 hertzbeat contributing link by Arnout Engelen · 3 months ago
  86. aef4caa register 'contributing' link for rocketmq by Arnout Engelen · 3 months ago
  87. 5a8b0ca airflow links by Arnout Engelen · 3 months ago
  88. 985c86a Set expectations around privacy and credits for reports (#54) by Arnout Engelen · 3 months ago
  89. 3dc602b huntr: mention UUID for resubmissions (#56) by Arnout Engelen · 4 months ago
  90. 1bc0ac4 move huntr statement out of blog by Arnout Engelen · 4 months ago
  91. 15ccb73 add favicon by Arnout Engelen · 4 months ago
  92. 04cd047 blog: no longer accepting huntr.com reports (#55) by Arnout Engelen · 4 months ago
  93. 93cc874 add link to selfserve list creation by Arnout Engelen · 4 months ago
  94. db98d83 link to syncope advisories by Arnout Engelen · 4 months ago
  95. f2d251c Add Nutch security model and CVE list by Arnout Engelen · 4 months ago
  96. cf04056 Add Storm security model by Arnout Engelen · 4 months ago
  97. 38c461c Direct infra issues to security@infra.apache.org by Arnout Engelen · 4 months ago
  98. d6783bd resources: add 'access to tools' section (#51) by Arnout Engelen · 4 months ago
  99. 99e4929 remove test page by Arnout Engelen · 4 months ago
  100. 531ae98 Merge pull request #52 from potiuk/update-bug-bounty-programme by Jarek Potiuk · 4 months ago