# Langchain-Timbr Security Policy

## Supported Versions

| Version | Supported          |
| ------- | ------------------ |
| < 3.x   | :white_check_mark: |

## Reporting a Vulnerability

If you discover a security vulnerability, please email `contact@timbr.ai` with the subject line `Langchain-Timbr Vulnerability Report`. In the email please, include:
- The `Langchain-Timbr` version used.
- **Steps to reproduce** the issue with sufficient detail to verify it 
- **Impact and severity** assessment (what an attacker can do)
- **Suggested fix** or mitigation (when available)
- Any proof-of-concept code, logs, or screenshots that help **reproduce the problem**

_Please note: We do not currently operate a formal bug bounty program. For valid reports, we will review the submission promptly and consider compensation on a case-by-case basis.
Thank you for helping us keep Timbr secure._
