Skip to content

Security: apache/jackrabbit-oak

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

Apache Jackrabbit follows the Apache Software Foundation security process. Please report suspected vulnerabilities privately to security@apache.org (the Jackrabbit PMC is reachable via private@jackrabbit.apache.org). Do not open public GitHub issues or pull requests for security reports.

Threat Model

What the project treats as in scope and out of scope, the security properties it provides and disclaims, the adversary model, and how findings are triaged are documented in THREAT_MODEL.md.

There aren't any published security advisories