# Security Policy

## Supported Versions

Only the latest `main` branch state is supported for security fixes.

## Reporting a Vulnerability

Please do not report security issues in public issues.

Use one of these channels:

- GitHub Security Advisory private report (preferred)
- Maintainer contact listed in project profile

When reporting, include:

- Affected endpoint/module
- Reproduction steps
- Potential impact
- Suggested fix (if available)

We will acknowledge reports as soon as possible and coordinate a fix and disclosure timeline.