# Security Policy

## Supported Versions

Only the latest release of django-simple-captcha receives security fixes.
Please upgrade to the newest version before reporting issues.

## Reporting a Vulnerability

Please report security vulnerabilities privately:

- Preferred: open a [GitHub security advisory](https://github.com/mbi/django-simple-captcha/security/advisories/new)
- Alternatively: email mbi@mbi.me

Do **not** open a public issue for security reports.

Please include a description of the vulnerability, steps to reproduce, and the
affected version(s). You can expect an acknowledgement within a few days; we
will work with you on a fix and coordinate disclosure once a patch is
released.
