If you discover a security vulnerability in S4F3-3TCH, please report it responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

1. GitHub Security Advisory (preferred): Use GitHub's private vulnerability reporting to submit a confidential report.
2. Email: Send details to security@itasha.corp with the subject line [SECURITY] S4F3-3TCH — <brief description>.

• Description of the vulnerability
• Steps to reproduce
• Affected versions
• Potential impact assessment
• Suggested fix (if any)

This policy covers:

• ComfyUI custom node implementations
• Template rendering (Jinja2)
• Input validation and data handling

Out of scope:

• ComfyUI core vulnerabilities (report to ComfyUI maintainers)
• Third-party dependencies (report to their maintainers directly)
• Social engineering attacks