# Security Policy

## Supported Versions

We only accept security reports against the latest version in this repo or the version deployed to app.diagrams.net, if different.

## Reporting a Vulnerability

Report at https://huntr.dev/bounties/disclose?target=https%3A%2F%2Fgithub.com%2Fjgraph%2Fdrawio&validSearch=true. There is a bug bounty program in place there.

## Out of scope

- Issues relating to the PlantUML integration.
- Issues relating to the www.drawio.com web site.