Hi all, I'm reaching out to see if there is an existing security specific mailing list in Flink. If there is, we should expose it in the offcial web site of Flink [1] to guide people to report security issues to this mailing list. If it still doesn't exist, I'm here to propose to setup a secur...@flink.apache.org mailing list for reporting and discussion of security specific issues. Currently, most well known apache projects such as apache common[2], hadoop[3], spark[4], kafka[5], hive[6], etc have a security specific mailing list. It would be nice if there is also a security specific mailing list for Flink.
Note that users should report security issues to the security mailing list. Looking forward to your feedback! Regards, Dian [1] https://flink.apache.org/community.html [2] https://commons.apache.org/mail-lists.html [3] https://hadoop.apache.org/mailing_lists.html [4] https://spark.apache.org/community.html [5] https://kafka.apache.org/project-security.html [6] https://hive.apache.org/mailing_lists.html