Security Policy
jackfromeast opened this issue · 3 comments
jackfromeast commented
Is there an existing issue for this?
- I have searched the existing issues
Contact Details
No response
What should this feature add?
Hi, InvokeAI maintainers!
We have found a critical vulnerability in InvokeAI. Could you set up a security policy for this repository to support responsible reporting of security issues?
Instructions can be found at: https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository
Thank you!
Alternatives
No response
Additional Content
No response
ausbitbank commented
I'm not invoke staff, but I'm pretty keen to learn more about this. Are you able to share the gist (without revealing full exploit details obviously) or -> invoke@ausbit.dev
jackfromeast commented
Thanks @ausbitbank and @hipsterusername for setting up the security policy!
I just sent my email and hope you guys can find time to review it.