Unlayered 3D is committed to maintaining the security of Unlayered Slicer and the printers it talks to. Our policy is to avoid introducing vulnerabilities and to address any security issues promptly and responsibly.
If you discover a security vulnerability, please report it privately. Do not open a public issue.
- Use GitHub's private vulnerability reporting for the repository: https://github.com/Unlayered3D/Unlayered-Slicer/security/advisories/new.
- Include as much detail as possible so we can understand and reproduce the issue:
- A clear description of the vulnerability.
- Steps to reproduce it.
- The affected version(s) and platform(s).
- Any suggested mitigation or fix.
- A maintainer will acknowledge the report, confirm the problem and determine the affected versions.
- Once a fix is available it ships in a release, and the advisory is published with credit to the reporter unless they prefer to stay anonymous.
To keep your setup secure when using Unlayered Slicer:
- Install releases only from https://unlayered3d.com/slicer/download or the GitHub releases page.
- Keep the slicer and your printer firmware up to date.
- Treat project files, profiles and plug-ins from untrusted sources with care.
Thank you for helping keep Unlayered Slicer and its users safe.