The following table lists versions and whether they are supported. Security

vulnerability reports will be accepted and acted upon for all supported

versions.

| Version | Supported |

| ------- | ------------------ |

| 3.3.x | :white_check_mark: |

| 3.2.x | :white_check_mark: |

| 3.1.x | :x: |

| 3.0.x | :x: |

| 2.2.x | :white_check_mark: |

| < 2.2 | :x: |

If you have found a security vulnerability, in order to keep it confidential,

please do not report an issue on GitHub.

Please email us details of the vulnerability at matplotlib@numfocus.org;

include a description and proof-of-concept that is [short and

self-contained](http://www.sscce.org/).

You should expect a response within a week of your email. Depending on the

severity of the issue, this may require some time to draft an immediate bugfix

release. Less severe issues may be held until the next release.

We do not award bounties for security vulnerabilities.

Update supported versions in Security Policy

When making major or minor releases, update the supported versions in the

Security Policy in :file:`SECURITY.md`. Commonly, this may be one or two

previous minor releases, but is dependent on release managers.