2.6 KiB
Security Policy
Supported Versions
The following versions of ComfyFlow Insight currently receive security updates and maintenance support.
| Version | Supported |
|---|---|
| 1.x | ✅ Yes |
| < 1.0 | ❌ No |
Reporting a Vulnerability
If you discover a security vulnerability in ComfyFlow Insight, please report it responsibly.
Please do not publicly disclose security vulnerabilities through GitHub Issues.
Instead:
- Contact the project maintainer privately.
- Provide a detailed description of the vulnerability.
- Include reproduction steps if possible.
- Include screenshots or logs when applicable.
- Allow reasonable time for investigation and remediation before public disclosure.
What to Include in a Report
When submitting a vulnerability report, please provide:
- Description of the issue
- Steps to reproduce
- Expected behavior
- Actual behavior
- ComfyUI version
- Operating system
- Python version
- Relevant logs or screenshots
Providing complete information helps us resolve issues more quickly.
Security Scope
ComfyFlow Insight is designed as a local ComfyUI extension.
The project:
- Runs locally within ComfyUI
- Does not intentionally collect user data
- Does not transmit workflow information to external servers
- Does not perform cloud-based workflow analysis
- Does not require user accounts
Security Best Practices
Users should:
- Keep ComfyUI updated
- Keep Python dependencies updated
- Download custom nodes only from trusted sources
- Review third-party workflow files before execution
- Avoid running untrusted code
Third-Party Dependencies
ComfyFlow Insight may rely on third-party libraries and ComfyUI components.
Security issues originating from third-party dependencies should also be reported through the appropriate upstream projects when applicable.
Responsible Disclosure
We appreciate responsible disclosure of security issues.
Our goal is to:
- Investigate reports promptly
- Confirm vulnerabilities
- Develop fixes when necessary
- Release updates in a timely manner
Security Goals
ComfyFlow Insight is developed with the following principles:
- Local-first processing
- Minimal external dependencies
- Transparency
- User control
- Workflow privacy
Contact
For security-related concerns, please contact the project maintainer through the repository contact methods.
Please avoid posting sensitive security information publicly.
Acknowledgements
We appreciate community members who responsibly identify and report security concerns.
Your efforts help improve the safety and reliability of ComfyFlow Insight for everyone.