| Version | Supported |
|---|---|
| 1.x.x | Yes |
If you discover a security vulnerability, please report it privately:
- Go to the Security tab of this repository
- Click 'Report a vulnerability'
- Provide a description, steps to reproduce, and potential impact
Do not open public issues for security vulnerabilities.
- JWT authentication with configurable expiration
- Role-based access control (Admin, Lab Technician, Researcher)
- Pydantic input validation with DNA sequence whitelist
- Per-IP rate limiting on all endpoints
- Comprehensive audit logging (no PII stored)
- HTTP security headers (CSP, X-Frame-Options, Referrer-Policy)
- Non-root Docker container execution
- Parameterized queries via SQLAlchemy ORM