# Security Policy
## Supported Versions
Latest tag and tip are supported.
Changes are not backported, please verify any issue against the latest tag and tip.
## Reporting a Vulnerability
Report vulnerabilities either via [GitHub's private reporting flow](https://github.com/microcosm-cc/bluemonday/security/advisories/new) or via email to the security@ alias of geomys.org.
There is no bug bounty program but security issues will be taken seriously and resolved as soon as possible.