The latest 0.2.x release gets security fixes. Older versions do not; please update.
Report security problems privately through GitHub's private vulnerability reporting. Never open a public issue for a security problem.
- Your LSDub and ComfyUI versions, and your OS.
- The steps to reproduce it (a workflow or a small input file helps).
- What an attacker could do with it.
We acknowledge your report and keep you informed as we work on it. We do not promise fixed timelines.
- In scope: the pack's nodes, its file handling (such as zip unpacking and model downloads) and the vendored engine.
- Out of scope: ComfyUI itself, third-party models and the sites that host them, and your own inputs.
We name you in the fix unless you would rather we didn't.