We actively maintain and provide security patches for the following versions of Contradiction MCP:
| Version | Supported |
|---|---|
| 0.3.x | ✅ |
| < 0.3.0 | ❌ |
We take the security of Contradiction MCP very seriously. If you discover a security vulnerability, please report it responsibly by following these guidelines:
- Preferred Method: Submit a private vulnerability report via GitHub Security Advisories.
- Alternative Method: Email details directly to dakshshrivastav56@gmail.com with the subject line
[SECURITY VULNERABILITY] Contradiction MCP.
Please include in your report:
- A detailed description of the vulnerability.
- Steps or proof-of-concept (PoC) code to reproduce the issue.
- The potential impact on users, LLM agents, or server environments.
- Any proposed remediations or patches if available.
- Initial Response: We will acknowledge receipt of your report within 48 hours.
- Assessment: We will investigate and assess the vulnerability within 5 business days.
- Fix & Disclosure: Once verified, we will develop a patch and coordinate a disclosure timeline (typically 30-90 days, depending on severity) before publishing public release notes.
Please do NOT open public GitHub issues or disclose vulnerabilities in public forums until a fix has been released and coordinated.