# Security Policy

## Supported Versions

Generally, fixes are applied only to the current release of
`express-rate-limit`, but we may choose to backport to older releases in some
circumstances.

## Reporting a Vulnerability

Please report vulnerabilities privately via GitHub. Please refer to
[this guide](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability)
on how to do the same.
