Create SECURITY.md

ai · web-flow · commit 6ceb8a46af9f · 2026-04-07T18:49:01.000+02:00
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,19 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest release is supported.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 8.5.x   | :white_check_mark: |
+| < 8.5.x | :x:                |
+
+After releasing new major version, we support old major for a year.
+
+## Reporting a Vulnerability
+
+To report a security vulnerability, please use the [Tidelift security contact].
+Tidelift will coordinate the fix and disclosure.
+
+[Tidelift security contact]: https://tidelift.com/security
