We take security very seriously. If you discover a security vulnerability, please email us at purvanshjoshi7534011576@gmail.com with details about the issue.

Please do NOT open public issues for suspected security vulnerabilities.

Currently, only the latest version of the project is supported with security updates.

• Use strong passwords (minimum 12 characters)
• Enable two-factor authentication where available
• Rotate credentials periodically
• Never share API keys or tokens

• Always use HTTPS for data transmission
• Encrypt sensitive data at rest
• Implement proper access controls
• Regular security audits recommended

• Keep all dependencies updated
• Review dependency security advisories
• Use dependency scanning tools
• Monitor for known vulnerabilities

The application should implement:

• Content-Security-Policy
• X-Content-Type-Options
• X-Frame-Options
• X-XSS-Protection
• Strict-Transport-Security

This project follows OWASP security guidelines and best practices for:

• SQL Injection Prevention
• Cross-Site Scripting (XSS) Protection
• CSRF Protection
• Authentication & Session Management
• Input Validation

We appreciate the security research community and thank those who responsibly disclose vulnerabilities.