The Apache Commons security page is https://commons.apache.org/security.html.