# Security Policy

## Supported Versions

The following versions of our libraries are receiving security updates:

| Version                       | Supported          |
| -------                       | ------------------ |
| `@azure/msal-browser@2.x.x`   | :white_check_mark: |
| `msal@1.x.x`                  | :white_check_mark: |
| `msal@0.x.x`                  | :x:                |
| `@azure/msal-angular@1.x.x`   | :white_check_mark: |
| `@azure/msal-angular@0.x.x`   | :x:                |
| `@azure/msal-angularjs@0.1.x` | :white_check_mark:|

## Reporting a Vulnerability

If you find a security issue with our libraries or services [please report it to the Microsoft Security Response Center (MSRC)](https://aka.ms/report-security-issue) with as much detail as possible. Your submission may be eligible for a bounty through the [Microsoft Bounty](http://aka.ms/bugbounty) program. Please do not post security issues to GitHub Issues or any other public site. We will contact you shortly upon receiving the information. We encourage you to get notifications of when security incidents occur by visiting [this page](https://www.microsoft.com/msrc/technical-security-notifications) and subscribing to Security Advisory Alerts.

# Security Policy

## Supported Versions

The following versions of our libraries are receiving security updates:

| Version                       | Supported          |
| -------                       | ------------------ |
| `@azure/msal-browser@2.x.x`   | :white_check_mark: |
| `msal@1.x.x`                  | :white_check_mark: |
| `msal@0.x.x`                  | :x:                |
| `@azure/msal-angular@2.x.x`   | :white_check_mark: |
| `@azure/msal-angular@1.x.x`   | :white_check_mark: |
| `@azure/msal-angular@0.x.x`   | :x:                |
| `@azure/msal-angularjs@0.1.x` | :white_check_mark: |
| `@azure/msal-react@1.x.x`     | :white_check_mark: |
| `@azure/msal-node@1.x.x`      | :white_check_mark: |

## Reporting a Vulnerability

If you find a security issue with our libraries or services [please report it to the Microsoft Security Response Center (MSRC)](https://aka.ms/report-security-issue) with as much detail as possible. Your submission may be eligible for a bounty through the [Microsoft Bounty](http://aka.ms/bugbounty) program. Please do not post security issues to GitHub Issues or any other public site. We will contact you shortly upon receiving the information. We encourage you to get notifications of when security incidents occur by visiting [this page](https://www.microsoft.com/msrc/technical-security-notifications) and subscribing to Security Advisory Alerts.

Update security.md with new libraries
Update security.md with new libraries
