SECURITY.md

Rama master · réplica de lectura del repositorio original.

# Security Policy

We take security seriously at Audion Server. If you believe you have found a security vulnerability, please report it to us responsibly using the instructions below.

## Supported Versions

Currently, security updates are provided for the following versions:

| Version | Supported |
| ------- | --------- |
| v1.0.x  | ✅ Yes     |
| < v1.0  | ❌ No      |

## Reporting a Vulnerability

**Please do not report security vulnerabilities via public GitHub issues.**

If you discover a vulnerability, please report it by:
1. Opening a **GitHub Private Vulnerability Report** in the repository (if enabled).
2. Alternatively, email the primary maintainer at `security@audion.stream` with a detailed description of the issue, steps to reproduce, and potential impact.

Please include:
- A description of the issue.
- The version of Audion Server (and underlying system environment/Docker setup) affected.
- Steps to reproduce or proof-of-concept code.
- Any suggested mitigations.

## Security Response Process

Once a vulnerability report is received:
1. We will acknowledge receipt of your report within 48 hours.
2. We will investigate the issue and determine the impact and severity.
3. We will work on a fix and aim to release a patched version within 14 days of receipt.
4. We will coordinate public disclosure after the patch is released to ensure users have time to update their installations.

Thank you for helping keep Audion Server secure for everyone!