Apache Software Foundation

0 advisories tracked · ASF Security (security@apache.org CNA) via NVD · checked automatically every minute

Check if your Apache device is affected

Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in Apache's recent advisories.

Official source

ASF Security (security@apache.org CNA) via NVD

The Apache Software Foundation is its own CVE Numbering Authority: every Apache project CVE (HTTP Server, Tomcat, ActiveMQ, Struts, Kafka, Airflow, OFBiz, Solr and 300+ more) is published by security@apache.org and announced on the projects' mailing lists. VulniPulse ingests the CNA feed from NVD filtered to security@apache.org — official, machine-readable, with affected/fixed versions embedded in each description. Per-project security pages (httpd.apache.org/security, tomcat.apache.org/security-XX.html) carry the vendor detail.

Visit Apache Software Foundation security advisories

Latest Apache advisories

All severities critical high medium low

All platforms HTTP Server (httpd)Tomcat Messaging (ActiveMQ/Kafka/Pulsar)Struts Airflow Big Data (Spark/Hadoop/Solr)Infra (APISIX/Traffic Server/CloudStack)

No matching Apache advisories

Nothing tracked matches this severity/platform combination yet — try clearing a filter.

Clear filters

← All vendors