We actively release security patches and updates for the following versions of NutriScan:
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
The NutriScan team takes the security of our application and user data seriously. If you discover a security vulnerability, please do not open a public issue.
Instead, please report vulnerabilities privately by following these steps:
- Send an email to harshitkumar@example.com with details of the vulnerability.
- Include a description of the issue, steps to reproduce, and potential impact.
- We will acknowledge receipt of your report within 48 hours and work on a fix promptly.
- Environment Isolation: API keys and database credentials must be configured via environment variables (
.env) and never committed to version control. - Input Sanitization: Query parameter sanitization on Express.js routes to prevent Injection attacks.
- Rate Limiting: Protection on public food lookup routes to prevent API abuse.
Thank you for keeping NutriScan safe for everyone!