Please use GitHub's private vulnerability-reporting feature when available. Do not open a public issue containing an exploit, credential, private data, or operationally sensitive information.

Include the affected version or commit, reproduction steps, expected impact, and any safe mitigation you have already tested.

Security reports may cover the web application, exported session files, dependency behavior, content loading, and repository automation.

SECTOR 305 is not production dispatch software and must not be connected to real CAD, radio, or emergency-service systems.