diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..36a9e38519 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,23 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +We take all security bugs in Mempool seriously. We appreciate your efforts and responsible disclosure and will make every effort to acknowledge your contributions. + +To report a security vulnerability, please use the [GitHub Security Advisory "Report a Vulnerability"](https://github.com/mempool/mempool/security/advisories/new) feature. + +Alternatively, you can email us at security@mempool.space. + +You should receive a response within 48 hours. If the issue is confirmed, we will release a patch as soon as possible depending on complexity.