Do not disclose vulnerabilities in public issues, pull requests, or comments.

Email [email protected] with a description, affected URL, reproduction steps, and impact. Please give NIPE a reasonable opportunity to investigate and coordinate a fix before disclosure.

Security reporting is repository-specific. Use the affected project's verified route on https://opensource.nipesolutions.com/security; that page links to the relevant repository's private-reporting form, policy, or security overview. Follow that repository's instructions and do not put sensitive details in a public issue.

This policy covers the NIPE-Solutions/oss-website repository and its deployed site. Maintainers acknowledge reports, assess impact, and coordinate fixes as capacity permits. No response-time or reward commitment is implied.