Skip to content

Security: jdbi/jdbi

SECURITY.md

Security Policy

Supported Versions

Jdbi encourages users to upgrade to the latest version.

Only the latest released version of Jdbi is actively supported. When reporting bugs or security issues, we encourage you to first upgrade to the latest version and confirm that the problem still exists.

We patch bugs and security relevant issues in the latest version and recommend upgrading. Jdbi goes to great length to ensure backwards compatibility so upgrading is almost always painless.

The current version of Jdbi requires Java 11 or better.

We will backport security fixes if needed to the last version that supports Java 8.

Version Supported
current latest version
latest version that supports Java 8
Jdbi 2.x

Release cadence

Historically, we have maintained a cadence of a release about every four weeks. The actual release cadence will depend on whether we have specific bug reports or new features that we want to release.

Reporting a Vulnerability

Security vulnerabilities should be reported by drafting a Security Advisory directly on github.

There aren’t any published security advisories