# Security Policy

## Supported Versions

Currently the last minor version v0.5.x is supported.

## Reporting a Vulnerability

You can privately report a vulnerability following this
[procedure](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability).
Alternatively you can create a Github issue at
<https://github.com/ulikunitz/xz/issues>.

In both cases expect a response in at least 7 days.

## Security Advisories

All security advisories for this project are published under
[github.com/ulikunitz/xz/security/advisories](https://github.com/ulikunitz/xz/security/advisories?state=published).