We actively maintain the following versions of MeetFlow AI:
| Version | Supported |
|---|---|
| v2.x | ✅ |
| v1.x | ❌ |
We take the security of our event attendees seriously. If you discover a security vulnerability within MeetFlow AI, please report it via the following process:
- Do not disclose publicly: Please avoid opening public issues for security vulnerabilities.
- Email: Send a detailed report to security@meetflow.ai (Simulated for Hackathon).
- Response: We will acknowledge your report within 24 hours and provide a fix within 7 days.
MeetFlow AI employs a Defense in Depth strategy:
- Input Sanitization: All user-provided and AI-generated content is sanitized via
DOMPurify. - Schema Validation: 100% of LLM outputs are validated against
Zodschemas before execution. - Environment Isolation: Sensitive API keys are restricted to specific Google Cloud origins.
- Content Security Policy (CSP): Strict policies prevent unauthorized script execution and data exfiltration.