| Version | Supported |
|---|---|
| 0.1.x | ✅ |
If you discover a security vulnerability, please report it responsibly:
- Do not open a public issue
- Email: arthurmgraf@hotmail.com
- Include a detailed description of the vulnerability
- Allow reasonable time for a fix before public disclosure
- All API keys and secrets are managed via environment variables
- Input validation on all API endpoints (Pydantic)
- NeMo Guardrails for LLM safety
- Rate limiting on all endpoints
- CORS configuration with explicit origins