summaryrefslogtreecommitdiff
path: root/SECURITY.md
blob: f6a52300879ecf3916e9da054439050f9e94b641 (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# Security Policy

## Supported Versions

We provide security updates for the following releases.
For more on Spack's release structure, see
[`README.md`](https://github.com/spack/spack#releases).


| Version | Supported          |
| ------- | ------------------ |
| develop | :white_check_mark: |
| 0.16.x  | :white_check_mark: |

## Reporting a Vulnerability

To report a vulnerability or other security
issue, email maintainers@spack.io.

You can expect to hear back within two days.
If your security issue is accepted, we will do
our best to release a fix within a week. If
fixing the issue will take longer than this,
we will discuss timeline options with you.