[Feature Request]: Vulnerability Disclosure Contact

[zdi-disclosures]

Is there an existing issue for this?

• I have searched the existing issues and checked the recent builds/commits

What would your feature do ?

Hello,

We have discovered a vulnerability in Stable Diffusion WebUI and we would like to disclose it responsibly to you. Please provide a private/secure channel where we can submit the report confidentially.

If we are unable to contact you after 15 days, we reserve the right to publish this vulnerability in accordance with our Disclosure Policy, which you can read here: https://www.zerodayinitiative.com/advisories/disclosure_policy/

Thank you and best regards,
Zero Day Initiative
Trend Micro
ZDI-DISCLOSURES@trendmicro.com

Proposed workflow

a private/secure channel where we can submit the report confidentially.

Additional information

No response

[w-e-w]

Hi I'm one of the main collaborators of these repo

AUTOMATIC1111 is basically radio silent quite a long time, and he is the only person that has rights to push master branch of this repo
we only only have the rights to push to the dev branch, so honestly I'm not too sure what can be done if there is a vulnerability

---

there's two ways to make contact

there's a Discord server invitation link on the wikihttps://github.com/AUTOMATIC1111/stable-diffusion-webui/wiki/Contributing
there we can talk privately via direct message

ou can also contact via email
you could contact me at wewgithub@gmail.com

if you want to try and contact AUTOMATIC1111 directly you can potentially try the email address that is listed in the get log
but my guess is like like that he won't answer