# Security policy

## Supported versions

Only the latest release receives security fixes.

## Reporting a vulnerability

Please report vulnerabilities privately through GitHub's **Report a vulnerability** button on the repository's *Security* tab (private security advisories). Include what you found, how to reproduce it and the affected version. Don't open a public issue.

You can expect an acknowledgement within a few days. Once a fix is released we'll credit you in the advisory unless you prefer not to be named.