gogpu/ui is currently in early development (v0.x.x).
| Version | Supported |
|---|---|
| 0.1.x | ✅ |
| < 0.1.0 | ❌ |
DO NOT open a public GitHub issue for security vulnerabilities.
Instead, please report security issues via:
-
Private Security Advisory (preferred): https://github.com/gogpu/ui/security/advisories/new
-
GitHub Discussions (for less critical issues): https://github.com/gogpu/ui/discussions
- Description of the vulnerability
- Steps to reproduce
- Affected versions
- Potential impact
- Initial Response: Within 72 hours
- Fix & Disclosure: Coordinated with reporter
gogpu/ui is a GUI library that uses gogpu ecosystem for rendering. Users should be aware of:
- User Input - Widgets handle user input; ensure proper sanitization in your application
- Accessibility - Screen readers receive widget content; avoid exposing sensitive data
- Theme Styling - Custom themes may affect visual security indicators
- Dependencies - gogpu/gg and gogpu/gogpu use native GPU libraries
- GitHub Security Advisory: https://github.com/gogpu/ui/security/advisories/new
- Public Issues: https://github.com/gogpu/ui/issues
Thank you for helping keep gogpu/ui secure!