Please do not open a public issue for a security problem. Use GitHub's private vulnerability reporting on the affected repository (Security, then Report a vulnerability).

These repositories are demonstrations and starting points. The default stack has no authentication and the auth setup is development only (Keycloak in dev mode with demo users); do not expose either to the internet. See each repository's documentation for what to change before production use.