# Security Policy

## Supported versions

Security fixes are provided for the latest published minor release line.

| Version | Supported          |
| ------- | ------------------ |
| 1.2.x   | :white_check_mark: |
| < 1.2   | :x:                |

## Reporting a vulnerability

**Please do not report security vulnerabilities through public GitHub issues.**

Report them privately via **GitHub's private vulnerability reporting**:

1. Go to the repository's **Security** tab → **Report a vulnerability**
   (https://github.com/DiamondsLab/hardhat-diamonds/security/advisories/new).
2. Describe the issue, affected versions, and reproduction steps.

If you cannot use private reporting, open a minimal, **non-sensitive** issue at
<https://github.com/DiamondsLab/hardhat-diamonds/issues> asking a maintainer to open a
private channel — do **not** include exploit details there.

We aim to acknowledge reports within a few business days and will coordinate a fix and
disclosure timeline with you.