[GH-ISSUE #2802] Security vulnerability report (requesting private disclosure channel) #1037

New issue

Closed

opened 2026-10-27 21:25:13 +00:00 by bsakaguchi · 1 comment

bsakaguchi commented

2026-10-27 21:25:13 +00:00

Owner

Originally created by @fault111 on GitHub (Apr 15, 2026).
Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/2802

Hi,

I have identified a security vulnerability in ComfyUI-Manager that I would like to report through a private channel before any public disclosure.

Could you please enable GitHub private vulnerability reporting (repo Settings > Security > Private vulnerability reporting), or provide a security contact email address? I have a 90-day coordinated disclosure timeline starting today.

Thank you.

-- fault111

Originally created by @fault111 on GitHub (Apr 15, 2026). Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/2802 Hi, I have identified a security vulnerability in ComfyUI-Manager that I would like to report through a private channel before any public disclosure. Could you please enable GitHub private vulnerability reporting (repo Settings > Security > Private vulnerability reporting), or provide a security contact email address? I have a 90-day coordinated disclosure timeline starting today. Thank you. -- fault111

bsakaguchi closed this issue

2026-10-27 21:25:13 +00:00

bsakaguchi commented

2026-10-27 21:25:14 +00:00

Author

Owner

@ltdrdata commented on GitHub (Apr 17, 2026):

Thank you for reaching out. I have activated the feature.

@ltdrdata commented on GitHub (Apr 17, 2026): Thank you for reaching out. I have activated the feature.

bsakaguchi referenced this issue

2026-10-27 21:33:36 +00:00

[PR #1037] [CLOSED] Update custom-node-list.json #1666