# How to post and follow security issue

**URL:** <https://forum.payara.fish/t/how-to-post-and-follow-security-issue/222>\
**Category:** General\
**Tags:** security\
**Created:** [February 18, 2022, 8:36am UTC](https://forum.payara.fish/t/how-to-post-and-follow-security-issue/222 "2022-02-18T08:36:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![robelcik](https://avatars.discourse-cdn.com/v4/letter/r/85f322/32.png) [@robelcik](https://forum.payara.fish/u/robelcik)\
**Post date:** [February 18, 2022, 8:36am UTC](https://forum.payara.fish/t/how-to-post-and-follow-security-issue/222/1 "2022-02-18T08:36:58Z")

</div>

Hello,

In December, I sent to security@payara.fish a report about a known DoS vulnerability in one of libraries included in Payara. I haven’t got any reply and I can see that mentioned library has not been upgraded in 5.2022.1.

Does anyone know how such issues should be handled? Was I supposed to make a PR instead, or to report to another place? Or, maybe such upgrades could be delayed in community edition (for various reasons) and I should consider enterprise edition if I expect enterprise-level support?

Thank your in advance for reply.

Regards,  
Robert

---

<div class="post-metadata">

**Author:** ![Marketing](https://avatars.discourse-cdn.com/v4/letter/m/87869e/32.png) [@Marketing](https://forum.payara.fish/u/Marketing)\
**Post date:** [March 9, 2022, 9:19am UTC](https://forum.payara.fish/t/how-to-post-and-follow-security-issue/222/2 "2022-03-09T09:19:07Z")

</div>

Hi Robelcik,

Thank you very much for flagging this up. One of our engineers has replied to you on [gitHub](https://github.com/payara/Payara/issues/5641).