PrivateCaptcha/SECURITY.md

Security Policy

Supported Versions

We release security updates for the latest version of both Community and Enterprise editions. Backported patches for older Enterprise Edition may be considered on a case-by-case basis.

Reporting a Vulnerability

If you discover a security vulnerability, please report it to us privately, instead of creating a GitHub Issue.

Email: security [at] privatecaptcha [dot] com

Out of Scope

The following are not considered security vulnerabilities:

• Issues in outdated or unsupported browsers
• Vulnerabilities in third-party dependencies (please report to the respective maintainers)
• Denial of Service (DoS/DDoS) attacks
• Issues requiring physical access to a user's device