ASF Project Security Information
Pages maintained by ASF projects to provide information on known security vulnerabilities are listed below. The security contact for reporting new vulnerabilities is also shown. Note that whilst all projects have a security team, not all project security teams have a dedicated address for reporting new vulnerabilities.
To report a vulnerability in an Apache project that is not listed below, please contact the Apache Security Team.
| Known vulnerabilities | Security Contact |
|---|---|
| HTTP Server | Apache Security Team |
| APR | Apache Security Team |
| Geronimo | Geronimo Security Team |
| Struts | Struts Security Team |
| Tomcat | Tomcat Security Team |