# Security Policy

## Supported versions

Security fixes are provided for the **latest release** of camera.ui. Please make sure you are on the current version before reporting — the issue may already be fixed.

## Reporting a vulnerability

I want camera.ui to be secure for everyone. If you've discovered a security vulnerability, I appreciate your help in disclosing it in a [responsible manner](https://en.wikipedia.org/wiki/Responsible_disclosure).

**Please do not open a public issue.** Publicly disclosing a vulnerability can put the entire community at risk. Instead, report it privately:

- **Email:** [hi@seydx.dev](mailto:hi@seydx.dev)
- **GitHub:** [privately report a vulnerability](https://github.com/cameraui/camera.ui/security/advisories/new)

Include as much detail as you can — affected version, deployment type (desktop app, Docker, bare-metal), steps to reproduce, and impact.

I treat security reports as my highest priority. You can expect an initial response within a few days, and I'll work with you to understand the scope of the issue and fully address it. Once a vulnerability has been corrected, a security hotfix release will be deployed as soon as possible, and I'll credit you in the release notes unless you prefer otherwise.