# Security Policy

## Supported Releases

| Version | Supported          |
| ------- | ------------------ |
| 2.0.1   | :white_check_mark: |
| 2.0.0   | :white_check_mark: |

## Reporting a Vulnerability

Please do not open public github issues or pull requests on this repository for security-related matters. Instead, follow the responsible disclosure process outlined below.

### Scope

This security policy covers the security of this repository and its code. If you discover a security vulnerability related to this repository, please report it responsibly.

### Responsible Disclosure Process

#### Option 1: Reporting via Github Security Advisors

1. **Contact Us**: Submit your report to [https://github.com/idurar/idurar-erp-crm/security](https://github.com/idurar/idurar-erp-crm/security) with details of the vulnerability. Please provide a clear and concise description of the issue, any potential impact, and a step-by-step demonstration if possible. Please do not include sensitive information in your initial email.

2. **Confirmation**: We will acknowledge receipt of your report within [X] business days and provide an estimated timeline for when you can expect a response.

3. **Investigation**: We will investigate the issue, which may involve reproducing the vulnerability or seeking further information from you.

4. **Resolution**: Once the vulnerability is confirmed, we will work to address it promptly and develop a fix.

5. **Disclosure**: We will coordinate with you regarding the public disclosure of the vulnerability. We aim to release a security advisory with information about the issue and the fix.



### Safe Harbor

We consider security research conducted under this policy to be:

- Authorized concerning any applicable anti-hacking laws, and we won't initiate legal action against researchers for their findings.

- Subject to responsible disclosure, where we work with researchers to understand and address reported vulnerabilities before public disclosure.

We appreciate your contributions to the security of this project and community.

Thank you!
