Skip to content

Security: hazelp343/foleydiff

Security

SECURITY.md

Security Policy

Supported versions

foleydiff is pre-1.0; only the latest released minor version receives fixes.

Version Supported
0.3.x
< 0.3

Reporting a vulnerability

Please do not open a public issue for security problems.

Instead, use GitHub's private vulnerability reporting on this repository (the Security tab → Report a vulnerability). Include:

  • a description of the issue and its impact,
  • steps or a proof-of-concept to reproduce it,
  • the affected version(s).

You can expect an acknowledgement within a few days. Once a fix is ready we will coordinate a release and credit you in the changelog unless you prefer to remain anonymous.

Scope notes

foleydiff loads and runs model weights you provide. As with any PyTorch project, only load checkpoints from sources you trusttorch.load can execute arbitrary code when given a malicious pickle.

There aren't any published security advisories