This repository is a Coding Academy project and is not production-ready.
Security fixes, when provided, are expected to land on the latest main branch only.
Please do not disclose vulnerabilities publicly.
If GitHub private vulnerability reporting is available for this repository, use it. Otherwise, open a GitHub issue without exploit details and describe the concern at a high level so the maintainer can coordinate the next step privately.
Include:
- A short description of the issue
- Affected endpoints or files
- Reproduction steps
- Expected impact
Avoid sharing secrets, tokens, .env values, database credentials, or other sensitive data in the report.