Security | Apache Answer

The Apache Software Foundation takes a rigorous stance on eliminating security issues in its software projects. If you find a security bug, with that in mind, please do not file public issues. Before reporting a security issue, check the security model. To report a new vulnerability you have discovered, please follow the ASF security vulnerability reporting process. The Answer community follows the ASF security vulnerability handling process, and will fix it as soon as possible.