The current published version is 0.0.1. Report security issues privately to the repository owner through GitHub's private vulnerability reporting when enabled; otherwise open a minimal issue asking for a private contact channel without disclosing the vulnerability. Include the affected managed package version and a minimal description of the impact.
Never include credentials, cloud endpoints, private keys, tokens, certificate bodies, device identifiers, proprietary models, or unredacted logs in an issue. For native interop issues, identify the affected MIGraphX/ROCm version, operating system and managed package version without attaching untrusted binaries. Report AMD runtime vulnerabilities through the appropriate upstream security channel as well.