Please do not disclose a suspected vulnerability in a public issue or discussion.

Use GitHub's private vulnerability reporting for this repository:

https://github.com/RRG314/WorldExplorer3D/security/advisories/new

Include the affected route or component, reproduction steps, expected impact, and any supporting screenshots or logs. Do not include real user data, passwords, access tokens, private keys, or payment information.

Security fixes are applied to the current production release and the active release branch. Older releases may not receive patches.

The public repository does not grant access to production Firebase, hosting, payment, or administrative systems. Production changes require owner-controlled credentials and deployment permissions that are not stored in the repository.