# Security Policy

## Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly:

- **Email:** security@guid.pl
- **Do NOT** open a public GitHub issue for security vulnerabilities

We will acknowledge your report within 48 hours and provide a fix as soon as possible.

## Scope

This policy covers the `cv-forge-mcp` MCP server. For issues related to the CV Forge web application, please report to the [cv-forge](https://github.com/Guid-Lab/cv-forge) repository.
