Security fixes are applied to the main branch.
| Version | Supported |
|---|---|
main |
Yes |
Do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.
Instead, use one of the following channels:
- GitHub (preferred): Report a vulnerability through GitHub's private vulnerability reporting.
- Email: psirt@amd.com (AMD Product Security Team).
For details on AMD's vulnerability disclosure process, see AMD Product Security.
When reporting, include:
- Affected version, commit SHA, or branch
- Description of the vulnerability and its potential impact
- Steps to reproduce or a proof of concept
Reports are triaged by severity. Reporters are kept updated until the issue is resolved.