| # Security Policy | |
| ## Supported Versions | |
| Fixes land on `master` and ship in the next release; older releases are not patched. | |
| ## Reporting a Vulnerability | |
| Report privately, not in a public issue: | |
| - GitHub: [private vulnerability reporting](https://github.com/hathach/tinyusb/security/advisories/new) (preferred) | |
| - Email: thach@tinyusb.org | |
| See the [threat model](https://github.com/hathach/tinyusb/blob/master/.oss-scanner/threat_model.md) for what is in scope. |