Nomos is pre-1.0. Only the latest published release receives security fixes.

Please report suspected vulnerabilities privately using GitHub's Report a vulnerability (the repository's Security → Advisories tab). Do not open a public issue for a security report.

Include a description, the affected version(s), and reproduction steps. We aim to acknowledge reports within a few days and will coordinate a fix and disclosure.