Please report vulnerabilities privately through GitHub: open the Security tab and choose Report a vulnerability. Do not post details publicly.

You can expect an acknowledgement, and a fix or an explanation, as time allows. This project is maintained by a small team and does not accept external contributions.

Only the latest release on PyPI receives fixes.