diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..a9c16eb --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,18 @@ +# Security Policy + +## Supported Versions + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +To report a security vulnerability, please email us at [security@example.com](mailto:security@example.com). + +Please include as much detail as possible about the vulnerability and steps to reproduce it. We request that you do not publicly disclose the issue until we have had a chance to investigate and address it. + +We will acknowledge receipt of your report within 2 business days. You can expect updates at least every 7 days until the issue is resolved. If the vulnerability is accepted, we will work with you to coordinate a fix and public disclosure. If the vulnerability is declined, we will provide a clear explanation of our reasoning.