Fork me on GitHub

Welcome to Apache Jackrabbit

The Apache Jackrabbit™ content repository is a fully conforming implementation of the Content Repository for Java Technology API (JCR, specified in JSR 170 and JSR 283).

A content repository is a hierarchical content store with support for structured and unstructured content, full text search, versioning, transactions, observation, and more.

Jackrabbit Oak is a complementary implementation of the JCR specification. It is an effort to implement a scalable and performant hierarchical content repository for use as the foundation of modern world-class web sites and other demanding content applications. See the Jackrabbit Oak website for more information.

Apache Jackrabbit is a project of the Apache Software Foundation

Apache Jackrabbit News

March 31th, 2020: Apache Jackrabbit Oak 1.0.x deprecated

The Apache Jackrabbit Team has decided to drop support and deprecate the 1.0 branch of Apache Jackrabbit Oak. Branch, tags and releases will still be available for future references, but will not show up on the download page anymore. Users are encouraged to upgrade to the latest stable versions (1.26.0 for Java 8, 1.6.20 for Java 7, 1.2.31 for Java 6).

March 26th, 2020: Apache Jackrabbit 2.8.x deprecated

The Apache Jackrabbit Team has decided to drop support and deprecate the 2.8 branch of Apache Jackrabbit. Branch, tags and releases will still be available for future references, but will not show up on the download page anymore. Users are encouraged to upgrade to the latest stable versions (2.20 for Java 8, 2.14 for Java 7, 2.12 for Java 6).

March 25th, 2020: Apache Jackrabbit Oak 1.26.0 released

Apache Jackrabbit Oak 1.26.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

March 23th, 2020: Apache Jackrabbit Oak 1.8.21 released

Jackrabbit Oak 1.8.21 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

March 19th, 2020: Apache Jackrabbit FileVault 3.4.4 and Jackrabbit FileVault Package Maven Plugin 1.1.2 released

Jackrabbit FileVault 3.4.4 is the current stable release of the repository content synchronization tool. It requires Java 8 or newer. See the downloads page for more details. Jackrabbit FileVault Package Maven Plugin 1.1.2 is current stable release of the package Maven Plugin.
See the downloads page for more details.

March 6th, 2020: Apache Jackrabbit 2.18.5 released

Apache Jackrabbit 2.18.5 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

February 19th, 2020: CVE-2020-1940: Apache Jackrabbit Oak sensitive information disclosure vulnerability (updated)

We just fixed a recently reported vulnerability in Apache Jackrabbit Oak: The optional initial password change and password expiration features are prone to a sensitive information disclosure vulnerability. The code mandates the changed password to be passed as an additional attribute to the credentials object but does not remove it upon processing during the first phase of the authentication. In combination with additional, independent authentication mechanisms, this may lead to the new password being disclosed. Mitigation: 1.12.0 - 1.22.0 should be upgraded to 1.24.0. 1.10.x should be upgraded to 1.10.8. 1.8.x should be upgraded to 1.8.20. 1.6.x should be upgraded to 1.6.20. 1.4.x should be upgraded to 1.4.26. For older maintained and affected branches (1.2.x), patches are available and releases will follow. See OAK-8870 for more information.

March 16th, 2020: Apache Jackrabbit Oak 1.22.2 released

Apache Jackrabbit Oak 1.22.2 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

February 19th, 2020: Apache Jackrabbit Oak 1.4.26 released

Jackrabbit Oak 1.4.26 is a patch release that contains fixes and improvements over the previous 1.4.x release. See the downloads page for more details.

February 14th, 2020: Apache Jackrabbit 2.21.0 released

Apache Jackrabbit 2.21.0 is an unstable release cut directly from trunk, with a focus on new features and other improvements. See the downloads page for more details.

February 13th, 2020: Apache Jackrabbit Oak 1.22.1 released

Apache Jackrabbit Oak 1.22.1 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

February 5th, 2020: CVE-2020-1940: Apache Jackrabbit Oak sensitive information disclosure vulnerability (updated)

We just fixed a recently reported vulnerability in Apache Jackrabbit Oak: The optional initial password change and password expiration features are prone to a sensitive information disclosure vulnerability. The code mandates the changed password to be passed as an additional attribute to the credentials object but does not remove it upon processing during the first phase of the authentication. In combination with additional, independent authentication mechanisms, this may lead to the new password being disclosed. Mitigation: 1.12.0 - 1.22.0 should be upgraded to 1.24.0. 1.10.x should be upgraded to 1.10.8. 1.8.x should be upgraded to 1.8.20. 1.6.x should be upgraded to 1.6.20. For older maintained and affected branches (1.2.x and 1.4.x), patches are available and releases will follow. See OAK-8870 for more information.

February 5th, 2020: Apache Jackrabbit Oak 1.6.20 released

Jackrabbit Oak 1.6.20 is a patch release that contains fixes and improvements over the previous 1.6.x release. See the downloads page for more details.

January 31th, 2020: Apache Jackrabbit Oak 1.8.20 released

Jackrabbit Oak 1.8.20 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

January 28th, 2020: CVE-2020-1940: Apache Jackrabbit Oak sensitive information disclosure vulnerability

We just fixed a recently reported vulnerability in Apache Jackrabbit Oak: The optional initial password change and password expiration features are prone to a sensitive information disclosure vulnerability. The code mandates the changed password to be passed as an additional attribute to the credentials object but does not remove it upon processing during the first phase of the authentication. In combination with additional, independent authentication mechanisms, this may lead to the new password being disclosed. Mitigation: 1.12.0 - 1.22.0 should be upgraded to 1.24.0. 1.10.x should be upgraded to 1.10.8. For older maintained and affected branches (1.2.x, 1.4.x, 1.6.x, 1.8.x), patches are available and releases will follow. See OAK-8870 for more information.

January 28th, 2020: Apache Jackrabbit Oak 1.24.0 released

Apache Jackrabbit Oak 1.24.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

January 28th, 2020: Apache Jackrabbit Oak 1.10.8 released

Apache Jackrabbit Oak 1.10.8 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

January 23th, 2020: Apache Jackrabbit Oak 1.8.19 released

Jackrabbit Oak 1.8.19 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

January 20th, 2020: Apache Jackrabbit Oak 1.4.25 released

Jackrabbit Oak 1.4.25 is a patch release that contains fixes and improvements over the previous 1.4.x release. See the downloads page for more details.

January 16th, 2020: Apache Jackrabbit Oak 1.22.0 released

Apache Jackrabbit Oak 1.22.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

January 13th, 2020: Apache Jackrabbit Oak 1.6.19 released

Jackrabbit Oak 1.6.19 is a patch release that contains fixes and improvements over the previous 1.6.x release. See the downloads page for more details.

January 7th, 2020: Apache Jackrabbit 2.20.0 released

Apache Jackrabbit 2.20.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

December 12th, 2019: Apache Jackrabbit Oak 1.10.7 released

Apache Jackrabbit Oak 1.10.7 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

December 10th, 2019: Apache Jackrabbit 2.19.6 released

Apache Jackrabbit 2.19.6 is an unstable release cut directly from trunk, with a focus on new features and other improvements. See the downloads page for more details.

November 29th, 2019: Apache Jackrabbit Oak 1.8.18 released

Jackrabbit Oak 1.8.18 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

November 25th, 2019: Apache Jackrabbit Oak 1.20.0 released

Apache Jackrabbit Oak 1.20.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

November 12th, 2019: Apache Jackrabbit Oak 1.10.6 released

Apache Jackrabbit Oak 1.10.6 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

November 8th, 2019: Apache Jackrabbit 2.18.4 released

Apache Jackrabbit 2.18.4 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

October 15th, 2019: Apache Jackrabbit Oak 1.6.18 released

Jackrabbit Oak 1.6.18 is a patch release that contains fixes and improvements over the previous 1.6.x release. See the downloads page for more details.

October 10th, 2019: Apache Jackrabbit 2.19.5 released

Apache Jackrabbit 2.19.5 is an unstable release cut directly from trunk, with a focus on new features and other improvements. See the downloads page for more details.

September 30th, 2019: Apache Jackrabbit Oak 1.18.0 released

Apache Jackrabbit Oak 1.18.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

September 18th, 2019: Apache Jackrabbit Oak 1.10.5 released

Apache Jackrabbit Oak 1.10.5 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

September 16th, 2019: Apache Jackrabbit Oak 1.8.17 released

Jackrabbit Oak 1.8.17 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

September 14th, 2019: Apache Jackrabbit Filevault 3.4.0 released

Jackrabbit FileVault 3.4.0 is the current stable release of the repository content synchronization tool. It requires Java 8 or newer. See the downloads page for more details.

September 12th, 2019: Apache Jackrabbit 2.14.8 released

Apache Jackrabbit 2.14.8 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

September 5th, 2019: Apache Jackrabbit 2.16.5 released

Apache Jackrabbit 2.16.5 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

August 30th, 2019: Apache Jackrabbit 2.18.3 released

Apache Jackrabbit 2.18.3 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

August 29th, 2019: Apache Jackrabbit Oak 1.8.16 released

Jackrabbit Oak 1.8.16 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

August 26th, 2019: Apache Jackrabbit 2.19.4 released

Apache Jackrabbit 2.19.4 is an unstable release cut directly from trunk, with a focus on new features and other improvements. See the downloads page for more details.

August 16th, 2019: Apache Jackrabbit Oak 1.10.4 released

Apache Jackrabbit Oak 1.10.4 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

July 29th, 2019: Apache Jackrabbit Oak 1.16.0 released

Apache Jackrabbit Oak 1.16.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

July 18th, 2019: Apache Jackrabbit FileVault Packaging Maven Plugin 1.0.4 released

Jackrabbit FileVault Packaging Maven Plugin 1.0.4 is current stable release.
See the downloads page for more details.

July 16th, 2019: Apache Jackrabbit Oak 1.8.15 released

Jackrabbit Oak 1.8.15 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

July 15th, 2019: Apache Jackrabbit Oak 1.10.3 released

Apache Jackrabbit Oak 1.10.3 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

July 4th, 2019: Apache Jackrabbit Oak 1.8.14 released

Jackrabbit Oak 1.8.14 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

July 4th, 2019: Apache Jackrabbit 2.10.x deprecated

The Apache Jackrabbit Team has decided to drop support and deprecate the 2.10 branch of Apache Jackrabbit. Branch, tags and releases will still be available for future references, but will not show up on the download page anymore. Users are encouraged to upgrade to the latest stable versions (2.18 for Java 8, 2.14 for Java 7, 2.12 for Java 6).

June 12th, 2019: Apache Jackrabbit 2.14.7 released

Apache Jackrabbit 2.14.7 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

May 28th, 2019: Apache Jackrabbit 2.18.2 released

Apache Jackrabbit 2.18.2 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

May 14th, 2019: Apache Jackrabbit Oak 1.8.13 released

Jackrabbit Oak 1.8.13 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

May 9th, 2019: Apache Jackrabbit 2.19.3 released

Apache Jackrabbit 2.19.3 is an unstable release cut directly from trunk, with a focus on new features and other improvement. See the downloads page for more details.

May 6th, 2019: Apache Jackrabbit 2.16.4 released

Apache Jackrabbit 2.16.4 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

April 17th, 2019: Apache Jackrabbit 2.18.1 released

Apache Jackrabbit 2.18.1 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

April 15th, 2019: Apache Jackrabbit Oak 1.12.0 released

Apache Jackrabbit Oak 1.12.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

April 12th, 2019: Apache Jackrabbit Oak 1.6.17 released

Jackrabbit Oak 1.6.17 is a patch release that contains fixes and improvements over the previous 1.6.x release. See the downloads page for more details.

April 11th, 2019: Apache Jackrabbit 2.19.2 released

Apache Jackrabbit 2.19.2 is an unstable release cut directly from trunk, with a focus on new features and other improvement. See the downloads page for more details.

March 21st, 2019: Apache Jackrabbit Filevault 3.2.8 released

Jackrabbit FileVault 3.2.8 is current stable release of the recently donated repository content synchronization tool. See the downloads page for more details.

March 21st, 2019: Apache Jackrabbit Oak 1.10.2 released

Apache Jackrabbit Oak 1.10.2 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

March 14th, 2019: Apache Jackrabbit Oak 1.2.31 released

Jackrabbit Oak 1.2.31 is a patch release that contains fixes and improvements over the previous 1.2.x release. See the downloads page for more details.

March 14th, 2019: Apache Jackrabbit Oak 1.8.12 released

Jackrabbit Oak 1.8.12 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

March 5th, 2019: Apache Jackrabbit 2.8.10 released

Apache Jackrabbit 2.8.10 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

February 28th, 2019: Apache Jackrabbit Oak 1.10.1 released

Apache Jackrabbit Oak 1.10.1 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

February 7th, 2019: Apache Jackrabbit 2.19.1 released

Apache Jackrabbit 2.19.1 is an unstable release cut directly from trunk, with a focus on new features and other improvement. See the downloads page for more details.

January 17th, 2019: Apache Jackrabbit Oak 1.8.11 released

Jackrabbit Oak 1.8.11 is a patch release that contains fixes and improvements over the previous 1.8.x release. See the downloads page for more details.

January 16th, 2019: Apache Jackrabbit Oak 1.10.0 released

Apache Jackrabbit Oak 1.10.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit Oak 1.x releases. See the downloads page for more details.

January 16th, 2019: Apache Jackrabbit Oak 1.6.16 released

Jackrabbit Oak 1.6.16 is a patch release that contains fixes and improvements over the previous 1.6.x release. See the downloads page for more details.

January 11th, 2019: Apache Jackrabbit Oak 1.4.24 released

Jackrabbit Oak 1.4.24 is a patch release that contains fixes and improvements over the previous 1.4.x release. See the downloads page for more details.

January 10th, 2019: Apache Jackrabbit 2.10.9 released

Apache Jackrabbit 2.10.9 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. See the downloads page for more details.

Older News

See the news archive for past news.