Only the latest version of MAIT is currently being supported with security updates.

We take the security of MAIT seriously. If you believe you have found a security vulnerability, please report it to us as described below.

• Report security vulnerabilities through GitHub Security Advisories
• Include steps to reproduce, or proof-of-concept code if possible
• Let us know how you would like to be credited (or if you would prefer to remain anonymous)

• The community will review reported vulnerabilities
• Progress updates will be posted on the GitHub Security Advisory
• Contributors who help fix security issues will be credited in release notes and security advisory (unless they prefer to remain anonymous)

1. Security report received and is assigned a primary handler
2. Problem is confirmed and a list of affected versions is determined
3. Code is audited to find any similar problems
4. Fixes are prepared and tested
5. Fixes are released to production
6. Public advisory is published

When deploying MAIT, please follow these security best practices:

1. Environment Configuration

   • Use strong, unique passwords
   • Keep all environment variables secure
   • Regularly rotate credentials

2. Access Control

   • Implement proper user authentication
   • Use role-based access control
   • Regularly audit user access

3. Network Security

   • Use HTTPS everywhere
   • Configure proper SSL/TLS settings
   • Implement proper firewall rules

4. Docker Security

   • Keep Docker and all dependencies updated
   • Use official base images
   • Scan containers for vulnerabilities

5. Monitoring

   • Implement logging for security events
   • Monitor system resources
   • Set up alerts for suspicious activities

Security updates will be released as soon as possible after a vulnerability is discovered and verified. Updates will be published through:

1. GitHub Security Advisories
2. Release Notes
3. Direct notification to affected parties (if applicable)

This is a community-driven project. Security is a shared responsibility among all community members. If you discover any security issues, please report them through GitHub Security Advisories, and the community will work together to address them.