# Security Policy

## Supported Versions

Only the latest released version of ddccontrol is supported with security updates.

Older releases may receive fixes at the maintainers' discretion, but this is not guaranteed.

## Reporting a Vulnerability

Please do not report security vulnerabilities in public GitHub issues.

Use GitHub's private vulnerability reporting:
https://github.com/ddccontrol/ddccontrol/security/advisories/new

Please include:

- affected ddccontrol version
- operating system and distribution
- affected component or command
- reproduction steps
- expected impact
- whether the issue is already publicly known

For non-sensitive security hardening suggestions or documentation improvements, a normal GitHub issue is fine:
https://github.com/ddccontrol/ddccontrol/issues
