# Security Policy

## Supported Versions

pg_stat_monitor project follows rolling release strategy. So all security updates go to new versions.

## Reporting a Vulnerability

Please report any vulnerabilities to our project in [Jira](https://perconadev.atlassian.net/jira/software/c/projects/PG/issues).

If the vulnerability is accepted and confirmed by our experts, you should normally expect us to deliver
a version with a fix according to the timelines provided below:

- Low/Medium: 120 days
- High: 90 days
- Critical: ASAP but should not exceed 30 days