strapi/SECURITY.md

# Security Policy

## Supported Versions

As of May 2022 (and until this document is updated), only the v4.x.x _stable_ releases of Strapi are supported for updates and bug fixes. Any previous versions are currently not supported and users are advised to use them "at their own risk".

- v3.x.x support is limited to Critical/High severity security updates only until December 2022
- v4.x.x is considered LTS until further notice

## Reporting a Vulnerability

Please report (suspected) security vulnerabilities to
**[security@strapi.io](mailto:security@strapi.io)**.

You will receive a response from us within 72 hours. If the issue is confirmed,
we will release a patch as soon as possible depending on complexity
but historically within a few days.
Add security and vulnerability reporting page 2019-11-04 15:06:49 -07:00			`# Security Policy`

			`## Supported Versions`

Update security doc to reference extended v3 support Modified to extend v3 security support until end of 2022 2022-05-12 10:20:55 -07:00			`As of May 2022 (and until this document is updated), only the v4.x.x _stable_ releases of Strapi are supported for updates and bug fixes. Any previous versions are currently not supported and users are advised to use them "at their own risk".`
Update SECURITY.md (#12257) Co-authored-by: DMehaffy <derrickmehaffy@gmail.com> Co-authored-by: DMehaffy <derrickmehaffy@gmail.com> 2022-01-21 22:29:21 +01:00
Update SECURITY.md Co-authored-by: Alexandre BODIN <alexandrebodin@users.noreply.github.com> 2022-05-17 10:41:48 -07:00			`- v3.x.x support is limited to Critical/High severity security updates only until December 2022`
Update security doc to reference extended v3 support Modified to extend v3 security support until end of 2022 2022-05-12 10:20:55 -07:00			`- v4.x.x is considered LTS until further notice`
Add security and vulnerability reporting page 2019-11-04 15:06:49 -07:00
			`## Reporting a Vulnerability`

			`Please report (suspected) security vulnerabilities to`
Update SECURITY.md 2021-05-03 23:24:17 +11:00			`[security@strapi.io](mailto:security@strapi.io).`
Add security and vulnerability reporting page 2019-11-04 15:06:49 -07:00
			`You will receive a response from us within 72 hours. If the issue is confirmed,`
			`we will release a patch as soon as possible depending on complexity`
			`but historically within a few days.`