Please report security vulnerabilities privately, not via public issues.

Use GitHub's private vulnerability reporting for this repository (Security tab -> Report a vulnerability). We aim to acknowledge reports within a few business days and will coordinate a fix and disclosure timeline with you.

This umbrella repository wires the Nexus components together and carries the cross-component CI. Vulnerabilities in a specific component are best reported here as well; we will route them to the right place.