The latest release is always supported with security updates. Older releases receive fixes on a best-effort basis.

Please report security vulnerabilities by opening a private GitHub Security Advisory at https://github.com/BloopAI/vibe-kanban/security/advisories/new.

Include a description of the issue, steps to reproduce, and your assessment of impact. You will receive an acknowledgement within 72 hours. If the report is accepted, a patch will be released as soon as possible and you will be credited in the release notes.