1*6da8f8c4SAndroid Build Coastguard Worker# Security Policy 2*6da8f8c4SAndroid Build Coastguard Worker 3*6da8f8c4SAndroid Build Coastguard Worker## Supported Versions 4*6da8f8c4SAndroid Build Coastguard Worker 5*6da8f8c4SAndroid Build Coastguard WorkerSecurity fixes are not back-ported. Please make sure you are running at least the latest [release version](https://jsoup.org/download) of jsoup. 6*6da8f8c4SAndroid Build Coastguard Worker 7*6da8f8c4SAndroid Build Coastguard WorkerPlease remember that jsoup is an Open Source library and is provided without any warranty. Before using jsoup in a critical environment, you should satisfy yourself that it works correctly and securely for your needs. 8*6da8f8c4SAndroid Build Coastguard Worker 9*6da8f8c4SAndroid Build Coastguard Worker## Reporting a Vulnerability 10*6da8f8c4SAndroid Build Coastguard Worker 11*6da8f8c4SAndroid Build Coastguard WorkerIf you believe or suspect you have identified a security vulnerability, please [report it](https://github.com/jhy/jsoup/security/advisories) 12*6da8f8c4SAndroid Build Coastguard Workervia the "Report a Vulnerability" button in Security Advisories. 13*6da8f8c4SAndroid Build Coastguard Worker([Details](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability)) 14*6da8f8c4SAndroid Build Coastguard Worker 15*6da8f8c4SAndroid Build Coastguard WorkerWe follow [Coordinated Disclosure](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/about-coordinated-disclosure-of-security-vulnerabilities) practices and ask that you do too. 16*6da8f8c4SAndroid Build Coastguard Worker 17*6da8f8c4SAndroid Build Coastguard WorkerPlease provide as much detail as possible in your report, including the steps to reproduce the vulnerability and sample code. 18*6da8f8c4SAndroid Build Coastguard Worker 19*6da8f8c4SAndroid Build Coastguard WorkerAlternatively to using GitHub, or if you have a security question, please email `[email protected]`. 20*6da8f8c4SAndroid Build Coastguard Worker 21*6da8f8c4SAndroid Build Coastguard Worker## Fixing Vulnerabilities 22*6da8f8c4SAndroid Build Coastguard Worker 23*6da8f8c4SAndroid Build Coastguard WorkerWe take all vulnerability reports seriously and strive to fix them as quickly as possible. Once we receive a report, we will verify the vulnerability and its impact. We will then work to develop and test a fix for the vulnerability, and release it as soon as possible. 24