Report a security flaw
If you have found a security flaw in NodeCE, we want to hear about it.
How to report
Email security@nodece.se. Describe the flaw, where it is, and how we can reproduce it. You can write in Swedish or English. You may also send the report by post to the address below.
This policy covers the desktop app, the server software, the nodece command, the cloud service and the websites at nodece.se. How we handle your personal data is described in the privacy policy.
How we handle the report
- We confirm that we have received the report.
- We fix flaws without delay.
- If the flaw is in a component from someone else, we notify the party that maintains the component.
- We publish a security advisory when a vulnerability in the desktop app or the server software has been fixed.
What we ask of you
- Only test in an installation that you run yourself, and do not open other people’s data.
- Do not affect the service for others, for example by overloading it.
- Do not disclose the flaw to others until we have published a security advisory about it, or until 90 days have passed since your report, unless we agree otherwise.
Manufacturer and support period
NodeCE is made by NodeiWest AB, org.nr 559169-4210, Blixtfyrsvägen 4, 423 40 Torslanda.
The support period for the desktop app and the server software is set out in section 5 of the Terms of Service.