# Security Policy

## Reporting a Vulnerability

Do not open a public issue for a suspected vulnerability.

Use the repository security advisory flow when it is available. If that flow is unavailable, contact the maintainers privately and include:

- a clear description of the vulnerability
- affected versions or commit ranges
- reproduction steps or a proof of concept
- suggested mitigations if you have them

Please allow time for investigation and coordinated remediation before public disclosure.

## Supported Versions

Ragloom currently supports the latest released minor line only.
