# Security Policy

## Supported versions

Only the latest release (and `latest` images built from `main`) receives security fixes.

## Reporting a vulnerability

Please report vulnerabilities privately through GitHub: go to the
[Security tab](https://github.com/bassem-elsodany/resolvr-dns-dashboard/security/advisories/new)
and choose **Report a vulnerability**. Do not open a public issue.

Include what you found, how to reproduce it, and the version or image tag you tested. You can expect an acknowledgement within a few days. Fixes are released as a new version and credited in the advisory unless you prefer otherwise.

## Deployment notes

Resolvr ships with default seeded credentials (see the README). Change them on first login, and run the dashboard behind HTTPS if it is reachable beyond your local network.