Found a security issue? Email security@my-nexus.social. Please give us a reasonable window to remediate before public disclosure. We do not yet operate a paid bounty program.
For machine-readable disclosure metadata see /.well-known/security.txt.