The published tool suite is currently version 0.1.0. Do not assume old binaries receive automatic updates.

Do not publish exploit details, credentials, private keys, backup passwords, personal data, or sensitive logs in a public issue.

Project website: https://nexus-q.link.

To report a vulnerability, visit the project website and use its private contact route to request a confidential security-reporting channel. Confirm that the route is private before sending technical details. If the site does not provide a suitable private route, contact the maintainer at lecodev@outlook.es only to request a secure channel; do not attach exploit details, credentials, or sensitive proof-of-concept material to an ordinary email.

The website address is a contact starting point; it is not, by itself, a guarantee that a particular web form or channel is encrypted or confidential.

Include the affected crate/version, OS and architecture, impact, minimal reproduction steps, and sanitized logs. Use synthetic data and remove tokens, keys, passwords, and personal information.

Maintainers will acknowledge and assess reports, coordinate remediation, and agree on disclosure timing with the reporter. No response-time SLA is promised until a maintained security contact and process exist.

See docs/SECURITY_MODEL.md for trust boundaries and limitations.