# Security policy

## Reporting a vulnerability

Please report vulnerabilities privately by email to security@extant2000.com.
Do not open a public issue or merge request for a security problem.

Include the affected version, a description of the issue, and steps or a test
that reproduce it if you have them.

We aim to acknowledge every report within 5 business days.