# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability:

* Do not open a public issue for sensitive vulnerabilities
* Report the vulnerability privately via [GitHub's private vulnerability reporting](https://github.com/dominicgisler/imap-spam-cleaner/security/advisories/new)
* Provide as much detail as possible

For non-sensitive issues, normal GitHub issues are acceptable.