The following versions are supported for security updates.

To report a vulnerability, email security@brakeman.org.

We will work as quickly as possible to investigate and address the issue, if necessary.

We do not have a vulnerability reward program.