# Security Policy

We take the security of the Nexus Exchange Rust SDK seriously.

## Reporting a vulnerability

**Please report security vulnerabilities privately** using GitHub's
[**Report a vulnerability**](https://github.com/nexus-xyz/nexus-exchange-rs/security/advisories/new)
button on this repository's **Security** tab. Private vulnerability reporting
is enabled, so your report stays confidential until a fix is ready.

Please **do not** open a public issue, pull request, or discussion for a
security vulnerability — that discloses it before users can patch.

We'll acknowledge your report as quickly as we can and keep you updated on the
fix and any coordinated disclosure.

For general (non-security) bugs, use the regular [issue templates](./ISSUE_TEMPLATE).
