Security Policy¶

Supported Versions¶

Long-term support (LTS) specifications¶

These versions are supported indefinitely, however support may be dropped once these versions are no longer in widespread use.

Non-LTS specifications¶

These versions are supported for 30 days after the next version.

Draft specifications¶

These versions are supported until the next draft milestone is released.

Version	Supported	Supported Until
4.0		1 year after 4.1
4.0 draft		Next draft release

Reporting a Vulnerability¶

This is a file format specification that should not have any vulnerabilities. If there is an attack that occurs due to insufficient definition of the file format, then please open an issue.