Security policy

Do not report a vulnerability in a pull request or on feedback.fluxer.com.

Submit a report through https://fluxer.app/security or email [email protected]. Include the affected component, impact, reproduction steps, and supporting evidence. Remove unrelated personal data and secrets.

The programme scope, testing rules, safe harbour, disclosure process, and reward terms are published at https://fluxer.app/security. That page is authoritative.