SECURITY.md

Security policy

Supported versions

Only lastest two minor version releases are supported for patching security fixes.

Reporting a vulnerability

Please create a dummy issue with high-level description of the security vulnerability, then report details to security@gogs.io privately, thank you!