# Security Policy
## Supported versions
Only the latest released version of ash-lock receives security fixes.
## Reporting a vulnerability
Please **do not** open a public issue for security problems.
Report vulnerabilities privately through GitHub:
<https://github.com/ashforge-rs/ash-lock/security/advisories/new>
Include a description of the issue, steps to reproduce, and the affected
versions. You should receive a response within 7 days. Once a fix is
available we will publish a GitHub Security Advisory and, where relevant,
a RustSec advisory.