spack/SECURITY.md

Security Policy

Supported Versions

We provide security updates for the following releases. For more on Spack's release structure, see README.md.

Version	Supported
develop	✅
0.17.x	✅
0.16.x	✅

Reporting a Vulnerability

To report a vulnerability or other security issue, email maintainers@spack.io.

You can expect to hear back within two days. If your security issue is accepted, we will do our best to release a fix within a week. If fixing the issue will take longer than this, we will discuss timeline options with you.