# Security Policy

## Supported Versions

We actively provide security updates for the following versions:

| Version | Supported          |
| ------- | ------------------ |
| 9.x.x   | :white_check_mark: |
| < 9.x.x | :x:                |

## Reporting a Vulnerability

We take the security of our users seriously. If you believe you have found a security vulnerability in this project, please report it to us as soon as possible.

**Please do not report security vulnerabilities through public GitHub issues.**

Instead, please report them via [GitHub Security Advisories](https://github.com/cybaea/obsidian-vault-intelligence/security/advisories/new).

Alternatively, you can email the maintainer directly at <security@cybaea.net>.

### What to include

-   A detailed description of the vulnerability.
-   Steps to reproduce the issue.
-   Potential impact if exploited.
-   Any suggested fixes or mitigations.

### Our Process

1.  You will receive an acknowledgement of your report within 48 hours.
2.  We will investigate the issue and determine if it is a valid security vulnerability.
3.  If valid, we will work on a fix and coordinate a release.
4.  We will provide updates on our progress and notify you when the fix is released.
5.  Once fixed, we will publish a security advisory to inform the community.

Thank you for helping keep this project secure!
