LuceeDownloadDocsExtensionsCommunityAISupport

Security

How to report a vulnerability in Lucee, and where to find advisories.

Report a vulnerability

Please report security issues by email to security@lucee.org. Please do not open a public issue or forum post for a vulnerability.

This is the process in the SECURITY.md of the Lucee repository. The same policy is shown on GitHub.

Advisories and updates

Security advisories

Published advisories for the Lucee repository on GitHub.

Supported versions

Keep to a supported release line to receive fixes.

Machine-readable contact

A security.txt is published at /.well-known/security.txt.