Security

Report a vulnerability

SECURITY.md

Security Policy

Version Releases

Supported Versions

Use this section to tell people about which versions of your project are currently being supported with security updates.

Version	Supported
Latest Version	✅
Any Other Version	❌

Reporting a Vulnerability

Use this section to tell people how to report a vulnerability.

Please report vulnerability disclosures to [email protected].

Unauthorized access vulnerability on three interfaces
GHSA-rrc5-qpxr-5jm2 published Dec 20, 2023 by tomsun28

Moderate
SnakeYaml Deser RCE
GHSA-rmvr-9p5x-mm96 published Feb 22, 2024 by tomsun28

High
AviatorScript Inject RCE
GHSA-mcqg-gqxr-hqgj published Feb 22, 2024 by tomsun28

High
JMX JNDI RCE
GHSA-gcmp-vf6v-59gg published Feb 22, 2024 by tomsun28

High
Expression Injection Vulnerability in Hertzbeat
GHSA-4576-m8px-w9qj published Dec 19, 2023 by tomsun28

High
Permission bypass due to incorrect configuration is on github.com/dromara/hertzbeat
GHSA-434f-f5cw-3rj6 published Dec 19, 2023 by tomsun28

High

Learn more about advisories related to apache/hertzbeat in the GitHub Advisory Database