---
name: Security Vulnerability Report
about: Report a security issue (use this template for public issues only)
title: '[SECURITY] '
labels: ['security', 'needs-triage']
assignees: ''
---

# ⚠️ Security Vulnerability Report

## ⚠️ IMPORTANT NOTICE

**For serious security vulnerabilities, please DO NOT create a public issue.**

Instead, report them privately via:
- **GitHub Security Advisories**: [Security Tab](https://github.com/wshobson/maverick-mcp/security) (Recommended)

## Public Security Issues Only

**Use this template only for:**
- [ ] Minor security improvements
- [ ] Documentation security issues
- [ ] Public security discussions
- [ ] Low-impact security suggestions

## Issue Description

**Security concern:**
Describe the security issue or improvement suggestion.

**Impact level:**
- [ ] Critical - Immediate attention required
- [ ] High - Important security flaw
- [ ] Medium - Security improvement needed
- [ ] Low - Minor security suggestion

## Category

**Type of security issue:**
- [ ] Authentication/Authorization
- [ ] Input validation
- [ ] Data exposure
- [ ] Configuration issue
- [ ] Dependency vulnerability
- [ ] Code injection
- [ ] Cross-site scripting (XSS)
- [ ] SQL injection
- [ ] Path traversal
- [ ] Information disclosure
- [ ] Denial of service
- [ ] Cryptographic issue
- [ ] Other: ___

## Affected Components

**Which parts of the system are affected?**
- [ ] MCP server
- [ ] Authentication system
- [ ] Database layer
- [ ] API endpoints
- [ ] Configuration files
- [ ] Dependencies
- [ ] Documentation
- [ ] Other: ___

## Environment

**System information:**
- MaverickMCP version: [e.g., 0.1.0]
- Python version: [e.g., 3.12.0]
- Operating system: [e.g., Ubuntu 22.04]
- Database: [PostgreSQL/SQLite version]

## Reproduction Steps (if applicable)

**For demonstrable issues only (no sensitive details):**

1. Step 1
2. Step 2
3. Step 3

## Expected Security Behavior

**What should happen from a security perspective?**

## Actual Behavior

**What actually happens?**

## Suggested Solution

**How do you think this should be fixed?**

## References

**Related security standards or best practices:**
- [ ] OWASP Top 10
- [ ] CWE (Common Weakness Enumeration)
- [ ] NIST guidelines
- [ ] Industry standards
- [ ] Other: ___

**Links to documentation or examples:**
- [Link 1]
- [Link 2]

## Additional Context

**Additional information:**
Add any other context about the security concern.

**Risk assessment:**
- [ ] Could lead to data breach
- [ ] Could allow unauthorized access
- [ ] Could cause service disruption
- [ ] Could expose sensitive information
- [ ] Low impact improvement
- [ ] Other: ___

## Disclosure

**For public issues:**
- [ ] I confirm this is not a serious vulnerability
- [ ] I understand serious issues should be reported privately
- [ ] This is a general security improvement suggestion
- [ ] This is a documentation or process improvement

---

**Remember:** For any serious security vulnerabilities, please report privately through GitHub Security Advisories.