Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported	Java
4.5.x	❌	8
5.3.x	❌	8, 11
5.4.6	✅ LTS till Dec 31, 2025, only security fixes	8, 11
6.0	❌	11
6.1	❌	11, 21
6.2	✅	11, 21
7.0	✅	11, 21

Reporting a Vulnerability

Please send an email to security@lucee.org

Lucee CVE-2024-55354 Security Advisory April 2025
GHSA-8r7v-h3xv-fvr4 published Apr 8, 2025 by zspitzer

High
RCE/XXE Vulnerability in Lucee
GHSA-vwjx-mmwm-pwrf published Mar 5, 2025 by zspitzer

Critical
Remote Code Exploit in Lucee Admin
GHSA-2xvv-723c-8p7r published Feb 9, 2021 by zspitzer

Critical

Learn more about advisories related to lucee/Lucee in the GitHub Advisory Database