# Security policy

The Protostream team and community take all security bugs very seriously.
You can find our guidelines here regarding our policy and security disclosure.

## Reporting security issues

Please report any security issues you find in Protostream to:

    security at infinispan.org

### Why follow this process

Due to the sensitive nature of security bugs, the disclosure process is more constrained than a regular bug.
We appreciate you following these industry accepted guidelines, which gives time for a proper fix and limit the time window of attack.

## Supported Versions

The following table shows which versions are supported for vulnerability updates.

| Version | Supported          |
|---------| ------------------ |
| 5.0.x   | :white_check_mark: |
| 4.6.x   | :white_check_mark: |
| < 4.6.0 | :x:                |
