redisk is a development-only tool:

• It binds to loopback by default.
• Data lives in memory only and is discarded on exit.
• Its single bearer token exists to prevent accidental cross-project access, not to withstand adversaries.

Vulnerabilities that matter are ones that let an attacker escape those guarantees — e.g. remote code execution via a crafted REST command causing crashes or memory exhaustion, or the emulator binding to a public interface without being asked.

Email hicham@sdk.enterprises with details and reproduction steps. Please do not open public issues for security reports. You can expect an initial response within 7 days.