# Security Policy

## Reporting a Vulnerability

Use GitHub's [private vulnerability reporting](https://github.com/bookorbit/bookorbit/security/advisories/new) to report security issues confidentially. Do not open public issues for security vulnerabilities.

Reports are typically acknowledged within a few days, and fixes are published as quickly as severity warrants.