If you discover a security vulnerability in Jomex, please report it responsibly:
Email: security@jomex.ai
Do not open a public issue for security vulnerabilities.
Security concerns include:
- ProofSlip hash chain integrity bypass
- API authentication/authorization issues in server.py
- Dependency vulnerabilities
- Data exposure through audit endpoints
We aim to acknowledge reports within 48 hours and provide a fix within 7 days for critical issues.