Please do not report security vulnerabilities through public GitHub issues, discussions or pull requests.

Report them privately instead:

1. Open the Security tab of the affected repository.
2. Click Report a vulnerability and describe the issue.

If you cannot use that form, send a private message to NexusPulse on LinkedIn and we will arrange a secure channel.

If the affected project belongs to one of our clients, report it to that repository's owner in the same way. We will work with them on the fix.

• The affected repository, URL or component
• Steps to reproduce, or a proof of concept
• The expected impact, for example data exposure or privilege escalation
• Your contact details, if you want us to follow up

• We aim to acknowledge your report within 5 business days.
• We will keep you updated while we investigate and fix the issue.
• Please give us reasonable time to release a fix before you disclose the issue publicly.

Thank you for helping keep NexusPulse and our clients safe.