# Security policy

## Reporting a vulnerability

**Report it privately, through GitHub's private vulnerability reporting:** the repository's **Security** tab, then **Report a vulnerability**. Do not open a public issue or discussion about it.

A report is read by the owner of the repository, and the advisory is published once a fix is available.

## Supported versions

Convia has not been released. Until it is, only `main` is supported.