# Security Policy

## Supported Versions

This section outlines which versions of Redis for Windows are currently supported with security updates.

| Version       | Supported          |
| ------------- | ------------------ |
| 8.2.x (win)   | :white_check_mark: |  
| 7.0.x (win)   | :x: |  <!-- No longer supported -->
| 6.2.x (win)   | :x:                |  <!-- No longer supported -->
| < 6.2 (win)   | :x:                |  <!-- Earlier versions, no support -->

> Note: Versions marked `(win)` are Windows-adapted builds. Security support is provided exclusively for these Windows-specific versions.


## Reporting a Vulnerability

If you discover a security vulnerability in Redis for Windows, please report it promptly using the following steps:

1. **Do not disclose the vulnerability publicly** (e.g., in issues, discussions, or social media) before it is addressed.
2. Send a detailed description of the vulnerability to [my9988@126.com]. Include:
   - Steps to reproduce the vulnerability.
   - Affected versions of Redis for Windows.
   - Potential impact of the vulnerability.
   - Any suggested fixes (if known).
3. You can expect an initial response within 48 hours acknowledging receipt of your report.
4. We will investigate the vulnerability and provide updates on our progress at least once per week.
5. If the vulnerability is accepted: We will work on a fix and coordinate a disclosure timeline with you. A security advisory will be published once the fix is released.
6. If the vulnerability is declined: We will provide a detailed explanation of our reasoning.


Thank you for helping keep Redis for Windows secure!
