# Security Vulnerabilities

Security issues are treated very seriously and will, by default,
takes precedence over other considerations including usability, performance,
etc...  Best effort will be used to mitigate side effects of a security
change, but PowerShell must be secure by default.

## Reporting a security vulnerability

If you believe that there is a security vulnerability in PowerShell,
it **must** be reported using [https://aka.ms/secure-at](https://aka.ms/secure-at) to allow for [Coordinated Vulnerability Disclosure](https://technet.microsoft.com/security/dn467923).
**Only** file an issue, if [MSRC](https://www.microsoft.com/en-us/msrc/faqs-report-an-issue?rtc=1) has confirmed filing an issue is appropriate.
