# Security Policy

## Supported Versions

Security fixes are applied to the latest release line.

## Reporting a Vulnerability

Please report vulnerabilities privately by emailing:

- `gocova.dev+mvin@gmail.com`

Include:

- affected version
- reproduction details
- impact assessment

Do not open a public issue for undisclosed vulnerabilities.
