Report suspected vulnerabilities privately through GitHub's security advisory form. Do not put confidential diffraction files or instrument metadata in a public issue.

The web interface listens on 127.0.0.1 only and has no authentication. Do not expose it to a network without adding authentication and rate limiting first.