The following versions of Fern are currently being supported with security updates. We regularly review dependencies for vulnerabilities and remediate them.

If you find a vulnerability in Fern, we ask that you alert us via email at security@buildwithfern.com. You'll get a reply acknowledging the report from a core maintainer at Fern within 24 hours.

We do not have a bug bounty program.