Plesk Extensions Guide MCP Server

# Security Policy ## Supported Versions We actively support the following versions with security updates: | Version | Supported | | ------- | ------------------ | | 1.x.x | :white_check_mark: | ## Reporting a Vulnerability We take the security of our software seriously. If you believe you've found a security vulnerability in this project, please report it to us as described below. **Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.** ### How to Report 1. **Via GitHub Security Advisories** (Preferred): - Go to [Security Advisories](https://github.com/barateza/mcp-plesk-extension-guide/security/advisories/new) - Create a new security advisory - Provide detailed information about the vulnerability 2. **Via Email** (Alternative): - Send an email to [advisory@barateza.dev](mailto:advisory@barateza.dev) (replace with actual contact if different) - Use the subject line: `[SECURITY] Vulnerability Report for mcp-plesk-extension-guide` ### What to Include Please include the following information in your report: - A clear description of the vulnerability - Steps to reproduce the issue - Potential impact and severity - Any suggested fixes or mitigations - Your contact information for follow-up ## What to Expect - **Acknowledgment**: We will acknowledge receipt of your report within 48 hours - **Investigation**: We will investigate the issue and provide regular updates (at least weekly) - **Resolution**: We will work to resolve the issue as quickly as possible - **Disclosure**: Once fixed, we will coordinate disclosure with you ## Scope This security policy applies to the core Plesk Extensions Guide MCP Server codebase. It includes: - The main server implementation (`server.py`, `main.py`) - Configuration and setup scripts - Documentation and build files ### Out of Scope - Third-party dependencies (please report to respective maintainers) - Configuration issues in user environments - General questions or feature requests ## Security Updates Security updates will be released as patch versions. We will announce security releases through: - GitHub Security Advisories - Release notes - Changelog updates ## Contact For questions about this security policy, please contact us via [GitHub Issues](https://github.com/barateza/mcp-plesk-extension-guide/issues) or email [security@barateza.dev](mailto:security@barateza.dev). Thank you for helping keep our project secure!