Security reporting

Report a security problem.

If you find a vulnerability in Nulx Linux or its official website, please report it privately. Do not access other people's data, disrupt services, or leave persistent access behind.

Private reporting

[email protected]

Use GitHub private vulnerability reporting or email this address with [SECURITY] in the subject. Do not attach passwords, tokens, or other secrets.

Email a report

A useful report includes

A clear description of the issue and affected surface
Reproduction steps with minimal impact
Observed and expected behavior
Relevant versions, URLs, or environment details
Potential impact and any safe mitigation

Machine-readable contact information is available at /.well-known/security.txt.