# Security Policy

## Supported Versions

The following versions of `n8n-nodes-puppeteer` are currently supported with security updates:

| Version | Supported          |
| ------- | ------------------ |
| 1.1.x   | :white_check_mark: |
| 1.0.x   | :white_check_mark: |
| 0.8.x   | :x:                |
| < 0.8   | :x:                |

## Reporting a Vulnerability

We take security vulnerabilities seriously. If you discover a security issue in n8n-nodes-puppeteer, please report it by:

1. **Email**: Send details to nick@penree.com
2. **GitHub**: For less sensitive issues, open a GitHub issue

When reporting, please provide:
- A description of the vulnerability
- Steps to reproduce the issue
- Possible impact of the vulnerability
- Any suggested fixes (if available)

### What to Expect

- **Initial Response**: You will receive an acknowledgment within 48 hours
- **Updates**: We will keep you informed of our progress every 3-5 days
- **Resolution Timeline**: We aim to resolve critical issues within 7 days

### Process

1. Once received, we will validate and assess the reported vulnerability
2. We will work on a fix and conduct testing
3. A security release will be issued if needed
4. Public disclosure will be coordinated with the reporter

Your efforts to responsibly disclose your findings are appreciated and will be taken into account to help protect our users.
