# Security Policy

## Supported Versions

Only the latest major version of Dasel is currently supported with security updates.

| Version | Supported          |
| ------- | ------------------ |
| 3.x.x   | :white_check_mark: |
| 2.x.x   | :x:                |
| 1.x.x   | :x:                |

## Reporting a Vulnerability

If you believe you have found a security vulnerability in Dasel, please report it privately and directly via one of the following:

- [GitHub vulnerability submission](https://github.com/TomWright/dasel/security/advisories/new)
- [contact@tomwright.me](mailto:contact@tomwright.me)

Please do **not** create a public GitHub issue for security vulnerabilities.  
This allows proper investigation and remediation before disclosure.

### What to Expect

- You will receive an acknowledgement of your report within **7 days**.
- If the vulnerability is confirmed, we will work to release a fix as quickly as possible and will notify you once resolved.
- If the report is declined, we will provide reasoning where possible.

### Important Notes

Security vulnerabilities are not the same as bugs, feature requests, or integration issues.  
For non-security bugs, please use the standard GitHub issue tracker:

👉 https://github.com/TomWright/dasel/issues  

Thank you for helping keep Dasel and its users safe.
