Do not open a public GitHub issue. Report privately via the AMD Product Security portal.
Please include: description and impact, steps to reproduce, and affected versions or commits.
We aim to acknowledge reports within 1 business day.
This policy covers code and configuration in this repository, including code inherited unchanged from flashinfer-ai/flashinfer, and issues in the AITER backend found through it; AMD coordinates with those projects. For other third-party dependencies, report upstream.