Security

Found a security problem?

Please tell us privately, not in a public issue or discussion, so we can fix it before it is widely known.

01 / Reporting

Report it privately on GitHub.

Each project's repository has a private way to report a vulnerability, under its Security tab. If the problem also affects an Apache® project, please also report it to the Apache security team. We coordinate disclosure with that project.

Security policy ↗