# Security Policy
## Supported Versions
| Version | Supported |
| ------- | ------------------ |
| 1.x.x | :white_check_mark: |
| < 1.0 | :x: |
## Reporting a Vulnerability
If you discover a security vulnerability, please **DO NOT** create a public issue.
Instead, please email: **quangminh2402.dev@gmail.com**
Include:
1. Detailed description of the vulnerability
2. Steps to reproduce
3. Potential impact
4. Suggested fix (if any)
You will receive acknowledgment within 48 hours.
## Security Measures
- Regular dependency updates via Dependabot
- npm audit checks in CI
- Docker images from official sources
- Environment variables for sensitive data
- Least privilege principle