# Security Policy

## Supported Versions

| Version | Supported     |
| ------- | ------------- |
| 1.x     | Yes (current) |
| < 1.0   | No            |

## Reporting a Vulnerability

If you discover a security vulnerability in x265-butler, please report it responsibly:

1. **Do NOT open a public issue.**
2. Open a confidential issue on the project's GitLab instance, or contact the maintainer via the e-mail address listed on the GitLab profile.
3. Include: affected version, steps to reproduce, and potential impact.

We commit to a best-effort response within 7 days. Depending on severity, a fix is released as:

- Critical / High: patch release within 14 days.
- Medium / Low: next regular release.

Thank you for helping keep self-hosters safe.