Security

SECURITY.md

Security Policy

Apache HertzBeat follows the ASF vulnerability handling process

Supported Versions

Version	Supported
Latest Version	✅
Any Other Version	❌

Reporting a Vulnerability

Please do not file GitHub issues for security vulnerabilities as they are public!

To report a new vulnerability you have discovered please follow the ASF vulnerability reporting process.

Extra Information

Unauthorized access vulnerability on three interfaces
GHSA-rrc5-qpxr-5jm2 published Dec 20, 2023 by tomsun28

Moderate
SnakeYaml Deser RCE
GHSA-rmvr-9p5x-mm96 published Feb 22, 2024 by tomsun28

High
AviatorScript Inject RCE
GHSA-mcqg-gqxr-hqgj published Feb 22, 2024 by tomsun28

High
JMX JNDI RCE
GHSA-gcmp-vf6v-59gg published Feb 22, 2024 by tomsun28

High
Expression Injection Vulnerability in Hertzbeat
GHSA-4576-m8px-w9qj published Dec 19, 2023 by tomsun28

High
Permission bypass due to incorrect configuration is on github.com/dromara/hertzbeat
GHSA-434f-f5cw-3rj6 published Dec 19, 2023 by tomsun28

High

Learn more about advisories related to apache/hertzbeat in the GitHub Advisory Database