Please report vulnerabilities privately to the project maintainers. Do not create a public issue with exploit details.

Include a description of the issue, affected versions or commits, reproduction steps, and suggested remediation when possible.

OpenEAHub uses local JWT authentication, bcrypt password hashing, input validation with Zod, Helmet headers, CORS configuration, and parameterized database access through Prisma.

This MVP is intended for local development and controlled environments. Production deployments should add HTTPS, centralized identity, audit logging, backups, secrets management, rate limiting, and security monitoring.