Please report security issues privately through GitHub Security Advisories on this repository, rather than opening a public issue. Include steps to reproduce and the potential impact.
This service does not implement authentication or authorization on its own. It is meant to sit behind a trusted network boundary or a gateway that handles auth. Do not expose it directly on the public internet as is.