# Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| 2.0.x   | :white_check_mark: |
| < 2.0   | :x:                |

## Reporting a Vulnerability

To report a security vulnerability, please use GitHub's **private vulnerability reporting** feature on this repository:

https://github.com/opendocman/opendocman/security/advisories

This ensures the report is only visible to the maintainers and is not publicly accessible.

You should receive a response within 72 hours. If you don't hear back, follow up on the advisory thread.

Please do not report security vulnerabilities through public GitHub issues, Discord, or Discourse.