Report vulnerabilities privately through GitHub security advisories. Please don't open a public issue for a security problem.

Include the version or commit, what an attacker can do, and the smallest reproduction you have. You should get an acknowledgement within a few days. Once a fix is released, the advisory is published with credit to the reporter unless you ask otherwise.

Lakefront is pre-1.0. Fixes land on the latest release only.

• Authentication is off by default. A serve() node with no auth option accepts every request. Set auth: { secret } (or { registry: true }) and mint capability tokens before exposing a node beyond a trusted network. See the auth guide.
• board.query runs caller SQL. Any token with read scope on a board can run arbitrary queries against that board's replica, so treat read as access to every row and column on it.
• The compose cluster is a demo. Its credentials are hard-coded in docker/compose.yaml and must not be reused anywhere real.