Register and share your invite link to earn from video plays and referrals.

Lou
@louszbd
Code/Work with GLM
Joined December 2025
1.6K Following    21.9K Followers
ZCode open sourced the code for community review. From now on improvements will be visible along the way. The security issues raised have been fixed. Now an independent review is underway. We followed up with ZCode team after learnt what happened. Been reading your feedback over the past few days. It’s been tough seeing the concern this has caused in community. We want GLM to help solve harder problems and let more people explore possibilities we haven’t imagined. That's our goal. Always has been and always will be. We will keep making GLM better and show it through our work.
Show more
In response to the ZCode product security issues reported by the community, we have completed the necessary remediation and sincerely apologize to all our users. We have open-sourced ZCode at placing the code under community scrutiny and making ZCode more open and transparent. We sincerely thank the community developers who previously identified issues in ZCode. Going forward, we will establish an ongoing product security vulnerability reporting and response process. We welcome developers to continue reviewing ZCode and reporting potential issues, and we will provide rewards based on the severity of the issues reported. With respect to the code data referenced by the community, we confirm that no such data is retained and that it has never been used for model training. Following the remediation, we invited the China Academy of Information and Communications Technology (CAICT) and NSFOCUS to conduct security assessments. The results are as follows: Through its technical assessment, CAICT confirmed that the zcode-prod Alibaba Cloud OSS bucket is in a zero-data state. Security remediation has been completed in the ZCode v3.14.0 client. The Repo Wiki feature has been removed, and the workflow for generating and uploading local repository snapshots has been disabled. NSFOCUS confirmed that all data objects in the zcode-prod Alibaba Cloud OSS bucket, as well as the bucket itself, have been deleted. Remediation has been completed in the ZCode v3.14.0 client. The Repo Wiki entry point and the associated generation workflow have been removed, and no functional path capable of triggering the generation of local repository snapshots or transmitting local files externally was identified. Once again, we sincerely apologize and welcome continued scrutiny from the community. The full security assessment report will be released soon.
Show more
0
106
319
17
Forward to community