This policy applies to all public repositories of Nexplore that do not have their own SECURITY.md.

Please report security vulnerabilities by email to security@nexplore.ch.

Do not open a public GitHub issue, pull request or discussion for a vulnerability.

Please include:

• the affected repository, package(s) and version(s)
• a description of the issue and its impact
• steps or a minimal reproducer
• a suggested fix, if you have one

We will confirm that we received your report, investigate it and keep you informed about the fix. Please give us reasonable time to release a fix before you disclose the issue publicly.