Superjolt MCP Server

# Security Policy ## Supported Versions We release patches for security vulnerabilities. Which versions are eligible for receiving such patches depends on the CVSS v3.0 Rating: | Version | Supported | | ------- | ------------------ | | 0.1.x | :white_check_mark: | | < 0.1 | :x: | ## Reporting a Vulnerability We take the security of Superjolt CLI seriously. If you believe you have found a security vulnerability, please report it to us as described below. **Please do not report security vulnerabilities through public GitHub issues.** ### How to Report Please report security vulnerabilities by emailing: 📧 **security@superjolt.com** You should receive a response within 48 hours. If for some reason you do not, please follow up via email to ensure we received your original message. ### What to Include Please include the following information to help us better understand the nature and scope of the possible issue: - Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.) - Full paths of source file(s) related to the manifestation of the issue - The location of the affected source code (tag/branch/commit or direct URL) - Any special configuration required to reproduce the issue - Step-by-step instructions to reproduce the issue - Proof-of-concept or exploit code (if possible) - Impact of the issue, including how an attacker might exploit the issue ### What to Expect - We will acknowledge your email within 48 hours - We will provide a more detailed response within 7 days indicating the next steps in handling your report - We will keep you informed of the progress towards a fix and full announcement - We may ask for additional information or guidance ## Disclosure Policy We follow the principle of Coordinated Vulnerability Disclosure. When we receive a security report, we will: 1. Confirm the problem and determine the affected versions 2. Audit code to find any similar problems 3. Prepare fixes for all supported versions 4. Release the fixes as soon as possible ## Comments on this Policy If you have suggestions on how this process could be improved, please submit a pull request or email security@superjolt.com.