# Security Policy

## Supported Versions

Only the latest version is supported. Security issues can be reported for the `master` branch as well, but it is not advised to use `master` for production purposes.

| Version                                                         | Supported              |
| --------------------------------------------------------------- | ---------------------- |
| `master`                                                        | :white_check_mark: Yes |
| [latest release](https://github.com/heviat/Mailu-OIDC/releases) | :white_check_mark: Yes |
| < latest version                                                | :x: No                 |

## Reporting a Vulnerability

Severe security issues with the OIDC implementation can be reported using the contact information on our [website](https://heviat.com/legal/imprint) or [GitHub organization page](https://github.com/heviat/).
Other severe security issues can be reported via security @ mailu.io .
For Minor security issues [create an issue](https://github.com/Mailu/Mailu/issues/new?title=Security+issue) in the Mailu/Mailu repository.