# Security Policy / 安全策略

## Supported versions / 支持版本

Only the latest published release is supported. / 仅支持最新发布版本。

## Reporting a vulnerability / 报告漏洞

**Do not open a public issue for security problems. / 请勿为安全问题创建公开 issue。**

Please use GitHub's private vulnerability reporting: **Security tab → "Report a vulnerability"**. / 请使用 GitHub 私密漏洞报告：仓库 **Security 标签页 → "Report a vulnerability"**。

- Include: affected version, impact, reproduction steps, and any mitigations. / 请包含：受影响版本、影响范围、复现步骤与缓解措施。
- You will receive an acknowledgement within 72 hours. / 我们将在 72 小时内确认收到。
- Please avoid public disclosure until a fix is released. / 在修复发布前请勿公开披露。

## Scope / 范围

Vulnerabilities in this plugin's code and configuration handling are in scope; vulnerabilities in DSH itself or in dependencies should be reported to their upstream projects. / 本插件代码与配置处理中的漏洞属于受理范围；DSH 本体或依赖库的漏洞请报告其上游项目。