# Security Policy
## Supported Versions
Only the latest released version is supported with security fixes.
## Reporting a Vulnerability
Please do not open a public issue for security vulnerabilities.
Use GitHub's private vulnerability reporting flow:
- <https://github.com/0xCarbon/qt-mcp/security/advisories/new>
Include:
- A clear description of the issue and impact
- Steps to reproduce
- Any proof-of-concept details
- Suggested mitigations (if known)
You will receive acknowledgement as quickly as possible, followed by triage,
fix development, and coordinated disclosure.