diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..a7a7459f --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,23 @@ +# Security Policy + +## Supported Versions + +The following chart shows versions of `django-helpdesk` that are currently receiving bugfixes and security patches. + +| Version | Supported | +| ------- | ------------------ | +| 0.3.x | :white_check_mark: | +| 0.2.x | :white_check_mark: | +| < 0.2 | :x: | + +## Reporting a Vulnerability + +If you believe you have discovered a bug impacting security in a supported version, please DO NOT file a Issue / Bug Report for it publicly. + +Instead, please send details to . Please be sure to include "django-helpdesk security issue" in the subject line for fastest response. + +Once reported, we'll be in touch to confirm the issue and work toward releasing a patch as soon as possible. + +After a patch has been released, a new release will be tagged and uploaded to PyPi, etc. At that time, details of the issue will be announced publicly. + +Users are always highly encouraged to upgrade to the latest bugfix release as soon as possible.