Skip to content

Security: HumanjavaEnterprises/comfyui-lsdub

SECURITY.md

Security

Supported versions

The latest 0.2.x release gets security fixes. Older versions do not; please update.

How to report

Report security problems privately through GitHub's private vulnerability reporting. Never open a public issue for a security problem.

What to include

  • Your LSDub and ComfyUI versions, and your OS.
  • The steps to reproduce it (a workflow or a small input file helps).
  • What an attacker could do with it.

What to expect

We acknowledge your report and keep you informed as we work on it. We do not promise fixed timelines.

Scope

  • In scope: the pack's nodes, its file handling (such as zip unpacking and model downloads) and the vendored engine.
  • Out of scope: ComfyUI itself, third-party models and the sites that host them, and your own inputs.

Credit

We name you in the fix unless you would rather we didn't.

There aren't any published security advisories