Skip to content

Security: Daksh-create349/Contradiction-MCP

Security

SECURITY.md

Security Policy

Supported Versions

We actively maintain and provide security patches for the following versions of Contradiction MCP:

Version Supported
0.3.x ✅
< 0.3.0 ❌

Reporting a Vulnerability

We take the security of Contradiction MCP very seriously. If you discover a security vulnerability, please report it responsibly by following these guidelines:

How to Report

Please include in your report:

  1. A detailed description of the vulnerability.
  2. Steps or proof-of-concept (PoC) code to reproduce the issue.
  3. The potential impact on users, LLM agents, or server environments.
  4. Any proposed remediations or patches if available.

What to Expect

  • Initial Response: We will acknowledge receipt of your report within 48 hours.
  • Assessment: We will investigate and assess the vulnerability within 5 business days.
  • Fix & Disclosure: Once verified, we will develop a patch and coordinate a disclosure timeline (typically 30-90 days, depending on severity) before publishing public release notes.

Please do NOT open public GitHub issues or disclose vulnerabilities in public forums until a fix has been released and coordinated.

There aren't any published security advisories