We release patches for security vulnerabilities. Currently supported versions:
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
The GPU Memory Calculator team takes security vulnerabilities seriously. We appreciate your efforts to responsibly disclose your findings.
If you discover a security vulnerability, please:
- DO NOT open a public GitHub issue
- Email the maintainers via GitHub with details about the vulnerability
- Include as much information as possible:
- Type of vulnerability
- Affected versions
- Steps to reproduce
- Potential impact
- Suggested fixes (if any)
- We will acknowledge receipt of your vulnerability report within 48 hours
- We will provide a more detailed response within 7 days
- We will work on fixing the vulnerability and keep you informed of our progress
- Once the vulnerability is fixed, we will publicly disclose it (with credit to you if desired)
- Security vulnerabilities will be addressed with high priority
- Fixes will be released as soon as possible
- We will coordinate disclosure with you to ensure adequate time for users to update
When using GPU Memory Calculator:
- Configuration Files: Do not store sensitive information in configuration files
- Dependencies: Keep dependencies up to date
- Web Interface: If deploying the web interface publicly, ensure proper authentication and access controls
- Input Validation: The tool validates configuration inputs, but be cautious with user-provided configuration files
- This tool performs calculations only and does not interact with actual GPUs or training systems
- Configuration files are loaded from the filesystem - ensure proper file permissions
- The web interface is intended for local use or trusted networks
Thank you for helping keep GPU Memory Calculator secure!