Security is part of the design of every NeKuDos integration. If you believe you have found a vulnerability in one of our public repositories, please report it privately.

Email info@nekudos.com with a subject beginning with [Security] and include:

• the affected repository, package, and version;
• a clear description of the issue and its potential impact;
• the minimum steps needed to reproduce it;
• relevant logs or screenshots with credentials and personal data removed; and
• any suggested mitigation, if available.

Do not open a public GitHub issue for a suspected vulnerability. Do not include passwords, access tokens, private keys, production data, customer information, or live SAP connection details in your report.

We will review the report, request additional information when needed, and coordinate disclosure after a fix or mitigation is available. Response and remediation times depend on severity, reproducibility, and the affected component.

Security fixes are applied to the latest supported release of an active public project unless that project's own documentation states otherwise. Archived repositories are not actively supported.