Create SECURITY.md

SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+## Supported Versions
+
+The following versions are currently supported:
+
+| Version | Supported          | EOL
+| ------- | ------------------ |--------------
+| 4.2.x   | :white_check_mark: | 31-DEC-2025
+| 4.1.x   | :white_check_mark: | 31-DEC-2024
+| 4.0.x   | :white_check_mark: | 31-DEC-2023
+| 3.6.x   | :white_check_mark: | 31-JUL-2023
+| < 3.5.0 | :x:                | 31-DEC-2022
+| 4.3-SNAPSHOT  | :x:          | Not ready for production
+
+## Reporting a Vulnerability
+
+Please report any vulnerability to security-incident-report@structr.com.
+
+We take any security incident seriously and will update you on a daily basis at least.
+In case of acceptance of the vulnerability, you can expect a security patch within 48 hours.
+For non-trivial vulnerabilities, we offer bug bounties.