# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in XML::Parser, please report it
responsibly.

**Contact:** Todd Rinaldo <toddr@cpan.org>

You may also open a [GitHub security advisory](https://github.com/cpan-authors/XML-Parser/security/advisories/new)
for private disclosure.

Please include:

- A description of the vulnerability
- Steps to reproduce the issue
- Any relevant version information

We aim to acknowledge reports within 48 hours and provide a fix or
mitigation plan within a reasonable timeframe.

## Supported Versions

Security fixes are applied to the latest stable release. Users are
encouraged to keep their installations up to date.
