# Security Policy

## Reporting a Vulnerability

Please do **not** open a public issue for security vulnerabilities, as this may expose
the vulnerability before a fix is available.

Instead, report them privately via one of the following:

- **Codeberg**: use the private security reporting feature (Issues → New Issue → Mark as private)
- **Email**: slundi@ikmail.com

We will acknowledge your report within **48 hours** and aim to release a fix within
**14 days** for critical issues. You will be credited in the release notes unless you
prefer to remain anonymous.

## Supported Versions

Only the latest released version receives security fixes.

| Version | Supported |
|---------|-----------|
| latest  | Yes       |
| older   | No        |
