# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability in Template Toolkit, please report
it responsibly.

**Do not open a public GitHub issue for security vulnerabilities.**

Instead, please use one of the following methods:

- **GitHub Private Vulnerability Reporting**:
  [Report a vulnerability](https://github.com/cpan-authors/Template2/security/advisories/new)
  via GitHub's built-in private reporting feature.

- **Email**: Contact the maintainers directly at the email addresses listed
  in the distribution metadata on [MetaCPAN](https://metacpan.org/dist/Template-Toolkit).

Please include:

- A description of the vulnerability
- Steps to reproduce the issue
- The version of Template Toolkit affected
- Any potential impact assessment

## Response

We will acknowledge receipt of your report and aim to provide an initial
assessment promptly. Security fixes will be prioritized and released as
soon as practical.

## Scope

This policy covers the Template Toolkit distribution (`Template-Toolkit`)
as published on CPAN and maintained in this repository.
