# Security Policy

## Supported Versions

Latest tag and tip are supported.

Changes are not backported, please verify any issue against the latest tag and tip.

## Reporting a Vulnerability

Report vulnerabilities either via [GitHub's private reporting flow](https://github.com/microcosm-cc/bluemonday/security/advisories/new) or via email to the security@ alias of geomys.org.

There is no bug bounty program but security issues will be taken seriously and resolved as soon as possible.