# Security Policy

## Reporting a Vulnerability

Please report security vulnerabilities using [GitHub's private vulnerability reporting](https://github.com/darccio/zas/security/advisories/new) instead of filing a public issue.

You should receive an initial response within a few days. If the vulnerability is confirmed, we will work on a fix and coordinate a release before any public disclosure.