We release patches for security vulnerabilities. The following versions are currently supported with security updates:

We take the security of MathProtocol seriously. If you discover a security vulnerability, please report it by emailing the repository owner or opening a private security advisory on GitHub.

Please include the following information:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if available)

• We will acknowledge receipt of your vulnerability report within 48 hours
• We will provide a detailed response within 5 business days
• We will work on a fix and release it as soon as possible
• We will credit you for the discovery (unless you prefer to remain anonymous)

When using MathProtocol:

1. Input Validation: Always validate inputs through the MathProtocol validation methods
2. No Code Execution: Never use eval() or exec() on user-provided inputs
3. Error Handling: Handle errors gracefully without exposing internal system details
4. Logging: Log security-relevant events for audit purposes
5. Dependencies: Keep all dependencies up to date
6. Least Privilege: Run the protocol with minimal necessary permissions

• Prompt Injection Prevention: The mathematical protocol design prevents traditional prompt injection attacks by enforcing strict code-based communication
• Input Sanitization: All inputs must pass strict mathematical validation before processing
• Output Validation: All outputs follow deterministic formats based on mathematical sets