# Security Policy
## Reporting a vulnerability
Please don't report security vulnerabilities in public issues. Instead, use GitHub's
private reporting: on this repository's **Security** tab, choose
[**Report a vulnerability**](https://github.com/eduardomilo/rust-runes/security/advisories/new).
Include the rules and facts (or code) needed to reproduce the problem and what an
attacker could achieve. Rule engines often run rules written by less-trusted authors,
so issues like rules that crash the host process, hang despite the cycle limit or
timeouts, or read data they shouldn't are in scope.
You should get a response within a week. Once a fix is released, the advisory is
published with credit to you, unless you prefer otherwise.
## Supported versions
Fixes are released for the latest published version only.