| Version | Supported |
|---|---|
| 1.1.x | ✅ Active support |
| 1.0.x | |
| < 1.0 | ❌ End of life |
If you discover a security vulnerability in scomp-link, please report it responsibly.
DO NOT open a public GitHub issue for security vulnerabilities.
- Email: giacomo.saccaggi@gmail.com
- Subject:
[SECURITY] scomp-link — <brief description> - Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
- Acknowledgment: within 48 hours
- Initial assessment: within 7 days
- Fix release: within 30 days for critical issues
The following are in scope:
- Arbitrary code execution (e.g., via malicious
.scompfiles) - Dependency vulnerabilities
- Path traversal in file operations
- Information disclosure
.scomp format uses Python's pickle module to serialize models and preprocessors. Loading a .scomp file from an untrusted source can execute arbitrary code.
Only load .scomp files you created yourself or received from a trusted source.
# SAFE: loading your own artifact
artifact = ScompArtifact.load("my_model.scomp")
# DANGEROUS: loading untrusted files
artifact = ScompArtifact.load("downloaded_from_internet.scomp") # ⚠️ RISKWe are evaluating safer serialization alternatives (safetensors, ONNX) for future releases.