# Security Policy

## Supported Versions

As of January 2022 (and until this document is updated), only the v3.0.0 and v4.0.0 _stable_ releases of Strapi are supported for updates. Any previous versions are currently not supported and users are advised to use them "at their own risk".

- v3 support is limited to Critical/High priority security updates only until September 2022
- v4 is considered LTS until further notice

## Reporting a Vulnerability

Please report (suspected) security vulnerabilities to
**[security@strapi.io](mailto:security@strapi.io)**.

You will receive a response from us within 72 hours. If the issue is confirmed,
we will release a patch as soon as possible depending on complexity
but historically within a few days.

# Security Policy

## Supported Versions

As of May 2022 (and until this document is updated), only the v4.x.x _stable_ releases of Strapi are supported for updates and bug fixes. Any previous versions are currently not supported and users are advised to use them "at their own risk".

- v3.x.x support is limited to Critical/High severity or security updates only until December 2022
- v4.x.x is considered LTS until further notice

## Reporting a Vulnerability

Please report (suspected) security vulnerabilities to
**[security@strapi.io](mailto:security@strapi.io)**.

You will receive a response from us within 72 hours. If the issue is confirmed,
we will release a patch as soon as possible depending on complexity
but historically within a few days.

Update security doc to reference extended v3 support
Update security doc to reference extended v3 support

Modified to extend v3 security support until end of 2022