# Security Policy

## Supported Versions

Most recent two major versions will receive security updates

| Version  | Supported          |
| -------- | ------------------ |
| v3.x.x   | :white_check_mark: |
| v2.x.x   | :white_check_mark: |
| < v2.0.0 | :x:                |

## Reporting a Vulnerability

If you think you found a vulnerability, please report it via [GitHub Security Advisory](https://github.com/lestrrat-go/jwx/security/advisories/new).
Please include explicit steps to reproduce the security issue.

We will do our best to respond in a timely manner, but please also be aware that this project is maintained by a very limited number of people. Please help us with test code and such.