Please report suspected vulnerabilities through GitHub private vulnerability reporting. Do not disclose a suspected vulnerability in a public issue, discussion, or pull request before it has been assessed.

Include, where possible:

• the affected Route Plotter version or commit;
• the browser and operating system;
• clear reproduction steps and the expected impact;
• a minimal, non-sensitive project or input that demonstrates the problem;
• any suggested mitigation.

Avoid including personal data, confidential maps, credentials, or other secrets. The maintainers will assess reports on a best-effort basis. No response or remediation timeframe is guaranteed.

Security fixes target the current Route Plotter v3 code and its current GitHub Pages deployment. Historical or separately archived versions are not actively maintained.