If you discover a security vulnerability in Gate MCP, please report it responsibly.
Do not open a public GitHub issue for security vulnerabilities.
Instead, email: [email protected]
Include:
- A description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
You will receive an acknowledgment within 48 hours and a detailed response within 5 business days.
| Version | Supported |
|---|---|
| 0.x | Current development branch |
- All secrets are encrypted at rest using AES-256-GCM with authenticated encryption
- Sensitive fields (passwords, tokens, keys) are automatically redacted in audit logs
- SQL queries use parameterized statements (no string concatenation)
- Dependencies are monitored for known vulnerabilities
- TypeScript strict mode is enforced across all packages