# Security Policy

## Supported Versions

We release security updates for the latest stable version of this project.

| Version | Supported          |
|---------|--------------------|
| Latest  | :white_check_mark: Yes |
| Older   | :x: No             |

> **Note:** If a reported vulnerability cannot be reproduced on the latest supported version, it may not be considered valid. However, depending on the nature and impact of the issue, we may still publish a security advisory to inform users of older versions.

## Reporting a Vulnerability

We take the security of this project seriously. If you believe you have found a security vulnerability, **do not** report it through a public GitHub issue or on Discord.

### How to Report

Please report vulnerabilities using one of the following methods:
- **GitHub Private Vulnerability Reporting**: Use the [Security Advisories](../../security/advisories/new) tab in this repository.
- **Email**: Send details to `security@struxa.cloud`.

Please include as much of the following information as possible to help us understand and reproduce the issue:
- Type of vulnerability
- Step-by-step instructions to reproduce the issue
- Proof-of-concept (if available)
- Your views on potential impact

We kindly ask that you:
- Give us a reasonable amount of time to address the issue before public disclosure.
- Avoid accessing or modifying data that does not belong to you.
- Act in good faith and avoid actions that could harm the project or its users.