Macareux Atlas treats the CMS adapter as a security boundary: authentication, authorization, and content filtering must not leak restricted knowledge to Assistant Core or end users.
| Component | Supported |
|---|---|
| Framework docs / OpenAPI in this repository | Latest main |
adapter/concretecms/md_atlas_adaptor |
Latest released package version on main |
Please report privately if you find issues such as:
- Bypass of session, CAPTCHA, origin, or HMAC checks
- Permission /
accessLevel/answerPolicymistakes that expose restricted or tenant content - Secret leakage (HMAC keys, tokens) to the browser or logs
- Injection or other flaws in adapter HTTP handlers
- Prefer GitHub private vulnerability reporting on this repository (Security → Report a vulnerability), if enabled.
- Otherwise email the maintainers at Macareux Digital via the contact options on macareux.co.jp and mark the message as a security report for Atlas.
Include:
- Affected component and version (or commit)
- Steps to reproduce
- Impact (what content or auth boundary is broken)
- Any suggested fix (optional)
Please allow reasonable time for a fix before public disclosure.
Use public GitHub issues for documentation gaps, non-sensitive bugs, and feature requests.