# Security Policy

## JAR signing

Spring Framework JARs released on Maven Central are signed.
You'll find more information about the key here: https://spring.io/GPG-KEY-spring.txt

## Supported Versions

Please see the
[Spring Framework Versions](https://github.com/spring-projects/spring-framework/wiki/Spring-Framework-Versions)
wiki page.

## Reporting a Vulnerability

Please see https://spring.io/security-policy.