# Security Policy
## Reporting a Vulnerability
Please do **not** open a public issue for security vulnerabilities, as this may expose
the vulnerability before a fix is available.
Instead, report them privately via one of the following:
- **Codeberg**: use the private security reporting feature (Issues → New Issue → Mark as private)
- **Email**: slundi@ikmail.com
We will acknowledge your report within **48 hours** and aim to release a fix within
**14 days** for critical issues. You will be credited in the release notes unless you
prefer to remain anonymous.
## Supported Versions
Only the latest released version receives security fixes.
| latest | Yes |
| older | No |