Add supported version notice

CONTRIBUTING.md

@@ -10,6 +10,7 @@ Thanks for your interest in contributing to the AliasVault project! There are a
 4. [Contributing to the Main Codebase](#4-contributing-to-the-main-codebase)
    - [4.1 Get in contact](#41-get-in-contact)
    - [4.2 Set up your local development environment](#42-set-up-your-local-development-environment)
+   - [4.3 Supported versions](#43-supported-versions)
 5. [License and Contributions](#5-license-and-contributions)
 
 ---
@@ -71,6 +72,10 @@ https://docs.aliasvault.net/misc/dev/
 
 If you run into any issues, feel free to join our [Discord](https://discord.gg/DsaXMTEtpF) to chat with the maintainers and author.
 
+### 4.3 Supported versions
+
+At this time during the public beta, we only support the **latest major and minor** release. Currentlt we are on **0.x**, so in practice that means the **latest minor** only. We do not accept pull requests and/or backports that target older release lines.
+
 ## 5. License and Contributions
 
 AliasVault is licensed under the GNU Affero General Public License v3.0 (AGPLv3). By submitting code, documentation, or other contributions to this project, you agree that:

SECURITY.md

@@ -4,6 +4,10 @@ Security is very important to us. We truly appreciate the security community and
 
 We investigate all reported issues and work with researchers on responsible disclosure. Certain vulnerabilities, especially those impacting confidentiality, integrity, authentication, or core protection mechanisms, may qualify for a CVE (Common Vulnerabilities and Exposures) identifier. Others may still result in fixes or defense-in-depth improvements.
 
+## Supported versions
+
+During the public beta we only support the **latest major and minor** release. On the current **0.x** line, that means the **latest minor** only. Security fixes are only applied to the latest supported version: make sure to upgrade frequently to stay supported.
+
 ## 1. Reporting a Vulnerability
 
 **Email:** security@support.aliasvault.net
@@ -68,7 +72,7 @@ Class 1 issues are eligible for CVE assignment. These represent vulnerabilities
 
 A report must:
 
-- Affect a **released version**
+- Affect a **released version** on the [supported release line](#supported-versions)
 - Be **reproducible**
 - Have a **concrete security impact**
 - Not depend on full device compromise