| Version | Supported |
|---|---|
| 1.0.x | ✅ |
If you discover a security vulnerability, please report it responsibly:
- Do NOT open a public GitHub issue
- Email: lakshan@example.com
- Include: description, steps to reproduce, potential impact
- We will respond within 48 hours
- JWT authentication with RS256 signing
- Rate limiting (100 req/min per IP)
- CORS whitelist (no wildcard origins)
- Input sanitization via Pydantic v2
- SQL injection prevention (parameterized Cypher queries)
- TLS 1.3 encryption in transit
- Environment variables for all secrets (never hardcoded)
- Docker container isolation
- Automated dependency scanning via GitHub Actions