# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in this project, please report it responsibly.

**Do not open a public GitHub issue for security vulnerabilities.**

Instead, please use [GitHub's private vulnerability reporting](https://github.com/vhspace/sdl3-rs/security/advisories/new) to submit your report. This allows us to assess and address the issue before it becomes public.

You can expect an initial response within 72 hours. We will work with you to understand the issue and coordinate a fix and disclosure timeline.

## Supported Versions

Security updates are provided for the latest release only.
