# Security Policy

## Supported Versions

To see which versions of Apache Camel are supported please refer to this [page](https://camel.apache.org/download/).

## Reporting a Vulnerability

For information on how to report a new security problem please see [here](https://camel.apache.org/security/).

## Security Model

Before submitting a report, please read the project's
[Security Model](docs/user-manual/modules/ROOT/pages/security-model.adoc). It documents who is
trusted, where the trust boundaries sit, which vulnerability classes the Camel PMC accepts, and
which categories are out of scope (route-author or operator responsibility, explicit opt-ins,
DoS through unthrottled routes, third-party transitive CVEs not reachable through Camel code,
etc.). Reports outside the documented scope will be closed with a reference to that page.
