Please report a vulnerability privately through GitHub's security advisory feature rather than opening a public issue.

The values in .env.example are development placeholders. Replace every password and the n8n encryption key before exposing the stack outside a local machine. Put the services behind TLS and an authenticated reverse proxy for internet-facing deployments.