Create SECURITY.md

2026-09-03 19:52:51 -05:00 · 2026-05-20 08:24:41 +02:00
parent 96ef41e31c
commit b9e56acece
1 changed files with 11 additions and 0 deletions
@@ -0,0 +1,11 @@
+# Security Policy
+
+## Supported Versions
+
+Usually, only the last minor Shlink version is supported. So if the last version is 5.2.2 and a bug is found, only 5.2.3 will be released. Bugs will usually not be backported to previous versions.
+
+The only exception is when a major version has just been released and the security issue is critical enough. In that case, a patch for previous major version may also be released, but this will be decided on a case by case basis.
+
+## Reporting a Vulnerability
+
+Do not report potential vulnerabilities as public issues. Instead, do it through https://github.com/shlinkio/shlink/security