# Security Policy

## Supported versions

Security fixes are provided for maintained releases of the module.

| Version | Supported |
|---------|-----------|
| 1.x     | Yes       |

## Reporting a vulnerability

If you believe you found a security issue, please do not open a public issue.

Send a private report to:

- `hello@mosaicora.io`

Include as much detail as possible:

- Description of the issue
- Affected versions
- Steps to reproduce
- Potential impact
- Any proof-of-concept or logs, if available

## What to expect

- We will review the report privately.
- If the issue is confirmed, we will coordinate a fix and disclosure timeline.
- We may ask for additional details to validate the report.