Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
0.1.x	✅

Reporting a Vulnerability

Please do NOT report security vulnerabilities through public GitHub issues.

Instead, email security@magic-ai-sdk.dev (or open a private security advisory on GitHub).

Include:

Description of the vulnerability
Steps to reproduce
Impact assessment
Suggested fix (if any)

We will acknowledge receipt within 48 hours and aim to release a fix within 7 days for critical issues.

Scope

MagiC core server (Go)
Python SDK (magic-ai-sdk)
Official Docker images
API authentication and authorization

Out of Scope

Third-party workers or plugins
Issues in dependencies (report upstream)

There aren’t any published security advisories