Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported	Java
4.x	❌	8
5.x	❌	8, 11
6.0	❌	11
6.1	❌	11, 21
6.2	✅ LTS	11, 21
7.0	✅ stable	11, 21

Reporting a Vulnerability

Please send an email to security@lucee.org

Lucee CVE-2024-55354 Security Advisory April 2025
GHSA-8r7v-h3xv-fvr4 published Apr 8, 2025 by zspitzer

High
RCE/XXE Vulnerability in Lucee
GHSA-vwjx-mmwm-pwrf published Mar 5, 2025 by zspitzer

Critical
Remote Code Exploit in Lucee Admin
GHSA-2xvv-723c-8p7r published Feb 9, 2021 by zspitzer

Critical

Learn more about advisories related to lucee/Lucee in the GitHub Advisory Database