This is the default security policy for all L337-org repositories. If the repository you are reporting against has its own SECURITY.md, that one takes precedence.

If you believe you have found a security issue in an L337-org project, please open a private vulnerability report via GitHub's security advisory flow rather than filing a public issue: on the affected repository, go to Security → Report a vulnerability (https://github.com/L337-org/<repo>/security/advisories/new). That keeps the discussion private until a fix is available.

Please include the affected version or commit, steps to reproduce, and your assessment of the impact. You'll get a response in the advisory thread; fixes are released as a new version of the affected project.

Only the latest release of each project is supported with security fixes - there are no long-term-support branches.