@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported versions
+
+Only the latest release receives security fixes. Please keep your
+installation up to date.
+
+## Reporting a vulnerability
+
+Report privately via GitHub Security Advisories
+(Security tab -> "Report a vulnerability"). Do not open a public issue.
+
+Include a description, the affected version and reproduction steps.
+Reports are acknowledged within a few days.