| Version | Supported |
|---|---|
| 0.1.x | ✅ |
If you discover a security vulnerability in FE Engine, please report it by:
- Do not open a public issue
- Email the maintainer directly at: [Contact via GitHub @krank56]
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
- Initial response: Within 48 hours
- Status update: Within 7 days
- Fix timeline: Depends on severity
- Critical: Within 7 days
- High: Within 14 days
- Medium: Within 30 days
- Low: Next release cycle
When using FE Engine:
- Input Validation: Always validate structural model inputs
- Dependencies: Keep dependencies up to date
- Audit Trail: Enable audit logging for production use
- Data Security: Do not include sensitive data in model names or comments
- Resource Limits: Set appropriate limits for model size to prevent resource exhaustion
- FE Engine performs numerical computations and does not handle untrusted external input by default
- GPU features are experimental and should be tested thoroughly before production use
- Large models may consume significant memory resources
Security updates will be released as patch versions and documented in CHANGELOG.md with a [SECURITY] tag.