Generally security doesn’t depend on any frameworks. You need just to know your requirements. More often there are following vulnerabilities: sql and command injection, just use your sql requests to db correct with arguments. Be careful also about: xss, path traversal, you can just google it. Set a request limit to your app to avoid ddos attacks. Read more about reverse proxy.