Welcome to the security policy for Visionatrix
Our commitment to security is crucial, and we strive to maintain the trust of our users by being transparent and responsible in our security practices.
This product utilizes a fork of ComfyUI, and we are dedicated to ensuring the security of all integrated components.
We carefully assess all third-party libraries and ComfyUI's Nodes before inclusion, prioritizing those we can confidently secure.
We support security updates for the latest non-beta version of Visionatrix
Your contributions to our security are invaluable.
If you discover a vulnerability, please report it to us using GitHub's Private Vulnerability Reporting feature.
Please provide detailed information, including steps to reproduce, affected versions, and any other relevant details.
Please do not disclose the vulnerability publicly until we have had a chance to address it.
If you haven't received response from us within 48 hours, feel free to create an issue in the GitHub repository.
Avoid including sensitive details. This will alert us to expedite our response.
Upon receiving your report, we will:
- Acknowledge receipt within 48 hours.
- Provide an estimated timeline for the fix.
- Keep you informed throughout the resolution process.
Your report will be treated with strict confidentiality.
We welcome and appreciate contributions to the security and advancement of open-source AI technologies.