Security Policy Reporting a Vulnerability Please report vulnerability disclosures to security@apache.org.