# Security policy

## Reporting a vulnerability

Please report security issues privately, not in a public issue or forum post.

Use GitHub's private reporting: the **Report a vulnerability** button on this
repository's **Security** tab.

Include the version you tested, the steps to reproduce, and the impact you see.
We aim to reply within a few working days.

## Supported versions

Only the latest release receives security fixes. Update to it before reporting.