Nelly
NellyDocs
Unauthenticated payment forgery in PayPal checkout endpoints
critical2026
We appreciate responsible disclosure of vulnerabilities. Please email security reports to [email protected].
If you make a good-faith effort to follow this policy, we will not pursue civil action or initiate a complaint to law enforcement. Avoid privacy violations, data destruction, and service disruption.
Please include steps to reproduce, affected endpoints, and any proofs of concept. We will acknowledge receipt promptly and keep you updated.
If you require encrypted channels, request options in your first email.
A thank-you to the people who have responsibly disclosed security issues to us. Want to be on this list? See the Reporting section above.