# Security Policy

Please review the [Version Support Policy](https://filamentphp.com/docs/introduction/version-support-policy) on our website.

## Reporting a Vulnerability

This repository contains the **Filament demo application** only. Where you report depends on what the vulnerability affects:

- **The Filament framework** — if the issue is in Filament itself (forms, tables, panels, actions, etc.) rather than something specific to this demo, please [report it to `filament/filament`](https://github.com/filamentphp/filament/security/advisories). Reporting it there means the fix reaches every Filament application, not just this demo.
- **The demo application** — if the issue is specific to this demo (its configuration, seeders, or example code), please [report it through GitHub](https://github.com/filamentphp/demo/security/advisories).

All security vulnerabilities will be promptly addressed.

## Scope

The demo is a public showcase running on disposable, seeded sample data — it is **not used with any real or personal user data**. The practical impact of a vulnerability in the demo itself is therefore limited. Vulnerabilities in the underlying Filament framework can affect real-world applications, so please report those to `filament/filament` as noted above.