nomos system AG handles vulnerability reports for all its products and services, including the code in this repository, under a coordinated vulnerability disclosure policy. The full policy, including scope, what to include in a report, our response times and the rules for researchers, is published at https://nomos-system.com/en/security/.
To report a vulnerability, email security@nomos-system.com. Please do not open a public issue for security problems.