Please report security issues privately through GitHub Security Advisories rather than a public issue.

Audio Browser Lab is designed for local analysis. The web app has no upload endpoint. The optional API must be explicitly started by an integrator and should be bound to a trusted interface with a narrow CORS origin and body-size limit.