Security fixes target the latest published release of FM Scan Monitor.

Please do not publish sensitive vulnerability details in a normal issue. Use GitHub's private vulnerability reporting for this repository when available. Include the FM Scan Monitor version, FM-DX Webserver version, platform, reproduction steps and expected impact.

For ordinary bugs that do not expose data or permissions, use a GitHub issue.

The plugin intentionally keeps scan administration server-authorized. Public tuner handover is limited to the browser socket holding a valid temporary lease and does not grant settings or result-management rights.