Security Announcements

Dubbo Security Announcements

Reporting Security Issues

The Apache Software Foundation takes a very proactive stance in eliminating security issues and denial-of-service attacks against its products.

We strongly encourage people to report such issues to our security mailing list before disclosing them in public forums.

Please note that the security mailing list is only intended for reporting unpublicized security vulnerabilities and managing the process of fixing such vulnerabilities. We cannot accept regular bug reports or other inquiries at this address. All mail sent to this address that is not related to undisclosed security problems in our source code will be ignored.

If you need to report bugs that are not undisclosed security vulnerabilities, please use the bug report page.

Security issue reporting email: security@dubbo.apache.org

For more information on how ASF handles potential security issues, please refer to https://www.apache.org/security/


Serialization Security

Using Serialization Protocols More Securely in Dubbo

RPC Protocol Security

Using RPC protocols securely in Dubbo

Registry Center Security

Using the registry center more securely in Dubbo

Dubbo Admin Security

Using Dubbo Admin more securely

Log4j Vulnerability Impact

Log4j CVE-2021-44228 Vulnerability Impact

Feedback

Was this page helpful?

Yes No

Last modified September 30, 2024: Update & Translate Overview Docs (#3040) (d37ebceaea7)