# Security Policy

## Reporting a vulnerability

Please report security vulnerabilities privately through
[GitHub Security Advisories](https://github.com/sinmentis/beehive/security/advisories/new).
This lets us investigate and release a fix before the details become public.

Do not open a public issue, pull request, or discussion that contains exploit
details, proof-of-concept code, or reproduction steps for an unfixed
vulnerability.

When reporting, please include:

- A description of the vulnerability and its potential impact.
- The steps required to reproduce it.
- Any relevant configuration or version information.

## Supported versions

Beehive is an alpha project. Security fixes are applied to the latest release
on the default branch. Older releases are not maintained.