security: make it clear about subtopics in server (#18754)

* security: make it clear about subtopics in server

* exclude DoS
This commit is contained in:
Xuan-Son Nguyen 2026-01-11 16:51:03 +01:00 committed by GitHub
parent 9789e28459
commit 4b060bf240
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 5 additions and 1 deletions

View File

@ -38,7 +38,11 @@ Only vulnerabilities that fall within these parts of the project are considered
- `src/**/*`
- `ggml/**/*`
- `gguf-py/**/*`
- `tools/server/*` (note: Web UI is not covered)
- `tools/server/*`, **excluding** the following topics:
- Web UI
- Features marked as experimental
- Features not recommended for use in untrusted environments (e.g., router, MCP)
- Bugs that can lead to Denial-of-Service attack
Note that none of the topics under [Using llama.cpp securely](#using-llamacpp-securely) are considered vulnerabilities in LLaMA C++.