If you think you have found a vulnerability in Eclipse RAP you can report it using one of the following ways:
- Contact the Eclipse Foundation Security Team
- Create a confidential issue
You can find more information about reporting and disclosure at the Eclipse Foundation Security page.
The project team is small, and as a result, it can only provide free support for the latest released version. Since Eclipse RAP versions are generally backward compatible, the project team advises users to always use the latest release. Commercial support is available for older versions.
This project follows Eclipse Foundation Vulnerability Reporting Policy.