Skip to content

Security: temporal-cortex/mcp

Security

SECURITY.md

Security Policy

Supported Versions

Version Supported
0.7.8 Yes
0.7.7 Yes
0.7.6 Yes
0.5.x Yes
0.4.x Yes
0.3.x No
0.2.x No
0.1.x No

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

  1. Do not open a public GitHub issue
  2. Use GitHub's Private Vulnerability Reporting to submit the report
  3. Include steps to reproduce if possible
  4. Allow reasonable time for a fix before public disclosure

We will acknowledge your report within 48 hours and aim to release a fix within 7 days for critical issues.

Scope

This policy covers the following packages:

  • @temporal-cortex/cortex-mcp (main npm package)
  • @temporal-cortex/cortex-mcp-darwin-arm64
  • @temporal-cortex/cortex-mcp-darwin-x64
  • @temporal-cortex/cortex-mcp-linux-x64
  • @temporal-cortex/cortex-mcp-linux-arm64
  • @temporal-cortex/cortex-mcp-win32-x64
  • Docker image built from this repository's Dockerfile

There aren’t any published security advisories