Skip to content

SECURITY.md

Latest commit

 

History

History
52 lines (36 loc) · 1.54 KB

SECURITY.md

File metadata and controls

52 lines (36 loc) · 1.54 KB
Raw

Security Policy

Supported Versions

Version Supported
0.1.x ✅ Beta - macOS Apple Silicon only
< 0.1 ❌

Reporting a Vulnerability

We take security seriously. If you discover a security vulnerability, please follow these steps:

  1. DO NOT create a public GitHub issue
  2. Email us at: 2450043691@qq.com
  3. Include detailed information about the vulnerability:
    • Description of the vulnerability
    • Steps to reproduce
    • Potential impact
    • Suggested fix (if any)
  4. We will respond within 48 hours

Security Best Practices

  • Keep dependencies up to date
  • Review third-party code before integration
  • Use environment variables for sensitive data
  • Follow secure coding practices
  • Validate and sanitize all user inputs

Known Security Considerations

Current Beta Limitations

  1. No Authentication: The web UI currently has no authentication mechanism
  2. Local Only: Designed for local use only, not recommended for public deployment
  3. File Access: Application has access to user-specified directories
  4. Model Files: Third-party GGUF model files should be from trusted sources

Recommendations

  • Only run on trusted networks
  • Do not expose to public internet without additional security layers
  • Regularly update to latest version when security patches are released

Contact

For security concerns, contact: 2450043691@qq.com

Note: This is a beta release. Security features will be enhanced in future versions.