Lem Security Policy Report vulnerabilities to security@lem-lang.org Do not disclose publicly until a fix is released Supported versions: latest MAJOR and previous MAJOR for 12 months Security advisories will be published with fixes