Skip to content

Security: umitkacar/pytorch-interactive-learning

Security

SECURITY.md

πŸ”’ Security Policy

πŸ›‘οΈ Supported Versions

We currently support the following versions with security updates:

Version Supported
Latest βœ… Yes
< 1.0 ❌ No

🚨 Reporting a Vulnerability

We take the security of PyTorch Teaching seriously. If you discover a security vulnerability, please follow these steps:

πŸ“§ How to Report

DO NOT create a public GitHub issue for security vulnerabilities.

Instead, please report security vulnerabilities by:

  1. Email: Send details to the repository maintainers
  2. GitHub Security Advisories: Use the "Security" tab on GitHub

πŸ“‹ What to Include

When reporting a vulnerability, please include:

  • πŸ” Type of vulnerability
  • πŸ“ Detailed description
  • 🎯 Steps to reproduce
  • πŸ’₯ Potential impact
  • πŸ› οΈ Suggested fix (if available)
  • πŸ“§ Your contact information

⏱️ Response Timeline

  • Initial Response: Within 48 hours
  • Status Update: Within 7 days
  • Fix Timeline: Depends on severity
    • πŸ”΄ Critical: Within 24-48 hours
    • 🟠 High: Within 7 days
    • 🟑 Medium: Within 30 days
    • 🟒 Low: Next release cycle

πŸ” Security Best Practices

When using this repository:

For Users

  • βœ… Always use the latest version
  • βœ… Keep PyTorch and dependencies updated
  • βœ… Use virtual environments
  • βœ… Don't run untrusted code
  • βœ… Validate data sources
  • βœ… Use HTTPS for downloads

For Contributors

  • βœ… Review code for security issues
  • βœ… Don't commit secrets or credentials
  • βœ… Use .gitignore properly
  • βœ… Sanitize user inputs
  • βœ… Follow secure coding practices
  • βœ… Test security fixes thoroughly

🚫 Common Security Issues

What We Watch For

  1. Code Injection

    • Command injection
    • Code execution vulnerabilities
  2. Data Security

    • Exposure of sensitive data
    • Insecure data handling
  3. Dependencies

    • Vulnerable packages
    • Outdated libraries
  4. Access Control

    • Unauthorized access
    • Permission issues

πŸ“š Security Resources

πŸ† Security Hall of Fame

We recognize and thank security researchers who responsibly disclose vulnerabilities:

No security issues reported yet.

πŸ“œ Disclosure Policy

When we receive a security report:

  1. βœ… We confirm receipt within 48 hours
  2. πŸ” We investigate and validate the issue
  3. πŸ› οΈ We develop and test a fix
  4. πŸ“’ We release the fix
  5. πŸŽ–οΈ We credit the reporter (if desired)

πŸ”„ Update Policy

  • Security patches are released as soon as possible
  • Critical vulnerabilities may result in immediate releases
  • Users are notified through:
    • GitHub Security Advisories
    • Release notes
    • README updates

Thank you for helping keep PyTorch Teaching safe! πŸ™

If you have questions about security, please contact the maintainers.

There aren’t any published security advisories