Create SECURITY.md

SECURITY.md

@@ -0,0 +1,22 @@
+# Security Policy
+
+**PLEASE DON'T DISCLOSE SECURITY-RELATED ISSUES PUBLICLY, [SEE BELOW](#reporting-a-vulnerability).**
+
+## Supported Versions
+
+For all Laravel releases, bug fixes are provided for 18 months and security fixes are provided for 2 years. For all additional libraries, including Lumen, only the latest major release receives bug fixes. In addition, please review the database versions [supported by Laravel](/docs/{{version}}/database#introduction).
+
+<div class="overflow-auto">
+
+| Version | PHP (*) | Release | Bug Fixes Until | Security Fixes Until |
+| --- | --- | --- | --- | --- |
+| 9 | 8.0 - 8.2 | February 8th, 2022 | August 8th, 2023 | February 6th, 2024 |
+| 10 | 8.1 - 8.3 | February 14th, 2023 | August 6th, 2024 | February 4th, 2025 |
+| 11 | 8.2 - 8.4 | March 12th, 2024 | September 3rd, 2025 | March 12th, 2026 |
+| 12 | 8.2 - 8.4 | Q1 2025 | Q3 2026 | Q1 2027 |
+
+</div>
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability within this Laravel API Boilerplate, please send an email to Joel Bladt at [email protected]. All security vulnerabilities will be promptly addressed.