Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported	Java
4.5.x	❌	8
5.3.x	❌	8, 11
5.4.x	✅ LTS till 2026, only security fixes	8, 11
6.0	✅	11
6.1	✅	11, 21

Reporting a Vulnerability

Please send an email to security@lucee.org

Remote Code Exploit in Lucee Admin
GHSA-2xvv-723c-8p7r published Feb 9, 2021 by zspitzer

Critical

Learn more about advisories related to lucee/Lucee in the GitHub Advisory Database