Please report a vulnerability privately, not in a public issue: use Report a vulnerability on the repository's Security tab (GitHub private vulnerability reporting), or email support@soul-craft.com (subject "security").

Include what is affected (repository, version or commit), how to reproduce it, and what an attacker gains. You will get an answer within five working days. Fixes ship as a new version. ComfyUI Base and every workflow package say their version in their handbook's first line.

Secrets never belong in a repository: API keys come from the environment or the provider's own config, and the licence and RunPod keys are never printed by any tool here.