Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 28 additions & 1 deletion website/community/security.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,4 +11,31 @@ If you have concerns regarding Fluss's security or discover a vulnerability or p

In the email, specify the project name **Fluss** and include a description of the issue or potential threat. You are also encouraged to include steps to reproduce the issue. The security team and the Fluss community will get back to you after assessing and analyzing the findings.

**PLEASE PAY ATTENTION** to report the security issue privately to **security@apache.org** before disclosing it publicly.
**PLEASE PAY ATTENTION** to report the security issue privately to **security@apache.org** before disclosing it publicly.

## Security Updates

This section lists fixed vulnerabilities in Fluss.

<table class="table table-bordered">
<thead>
<tr>
<th class="text-left" width="200">CVE ID</th>
<th class="text-left" width="250">Affected Fluss versions</th>
<th class="text-left" width="550">Notes</th>
</tr>
</thead>
<tbody>
<tr>
<td>
<a href="https://www.cve.org/CVERecord?id=CVE-2026-49361">CVE-2026-49361</a>
</td>
<td>
0.8.0, 0.9.0
</td>
<td>
Users are advised to upgrade to Fluss 0.9.1 or later versions. See the <a href="https://lists.apache.org/thread/dccw6tj0njwtmvbftq13mw7fdhsok373">advisory</a> for details.
</td>
</tr>
</tbody>
</table>