# Security Policy

## Supported Versions

| Version | Supported | End-of-life date |
| ------- | --------- | ---------------- |
| 1.x     | ❌ |
| 2.x     | ✅ | 2025-12-31 |
| 3.x     | ✅ | not yet determined |

Each supported major version is only serviced for security issues at its tip.
For example 2.5 will receive updates but 2.4 will not.
3.0 will receive updates until 3.1 is stable, at which point 3.0 will no longer received security updates.

## Reporting a Vulnerability

Please use [the Security tab](https://github.com/MessagePack-CSharp/MessagePack-CSharp/security) to responsibly report security vulnerabilities.

Alternatively, email the project's main contributors with any vulnerability you become aware of.

    Yoshifumi Kawai <ils@neue.cc>; Andrew Arnott <andrewarnott@live.com>
