# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in mitm2openapi, please report it
privately via [GitHub Security Advisories](https://github.com/Arkptz/mitm2openapi/security/advisories/new).

We will acknowledge receipt within 72 hours and aim to publish a fix within
30 days for confirmed issues.

Please do NOT open a public issue for security reports.
