Security Policy

Supported Versions

The following table outlines the versions of the project that are currently supported with security & feature updates:

Note

Once a version starts its security phase, it will no longer receive feature updates. Only critical bug fixes and security updates will be provided.

Package Version	Umbraco Version	Security Phase Start	End of Life
16.x	16	2026-03-12	2026-06-12
17.x	17	2027-11-27	2028-11-27

Unsupported Versions

Package Version	Umbraco Version	End of Life
15.x	15	2025-11-14

Future Support

Project maintainers plan to support all STS (Short-Term Support) and LTS (Long-Term Support) versions of Umbraco. However, exact release dates cannot be guaranteed.

Note

Visit jcdc.dev/blog/umbraco-version-information for more information on Umbraco versions.

Reporting a Vulnerability

If you discover a vulnerability in this project, please follow one of these steps to report it:

• Create an issue
• Contact the project author privately at jcdc.dev/contact

Details

Include as much information as possible about the vulnerability, including:

• Steps to reproduce
• Potential impact
• Any suggested fixes

Acknowledgment

You will receive an acknowledgment of your report as soon as possible.

Note

Response times may vary depending on other commitments.

Resolution

Once the vulnerability is confirmed, project maintainers will work to resolve it as quickly as possible.

You will be notified once the issue has been resolved or rejected.

Tip

If the vulnerability is accepted, you will receive credit in the release notes.

Thank you for helping to keep this project secure!