# Security policy

## Supported version

Security fixes are provided for the latest release.

## Report a vulnerability

Use **Security → Report a vulnerability** in this repository. Please do not put
session contents, local paths, profile files, or a working destructive proof of
concept in a public issue.

Include the DSH version, plugin version, storage backend, operating system, and
the smallest redacted reproduction you can provide. Do not attach real session
logs.