Please report vulnerabilities privately through GitHub's security advisory form. Do not include credentials, production data, or sensitive logs in an issue.

Supported releases receive security fixes on the latest minor version. The examples bind HTTP to loopback by default; review authentication, authorization, rate limits, and network exposure before serving the endpoint publicly.