Please report security vulnerabilities by email to info@pycm.io.

If the security vulnerability is accepted, a dedicated bugfix release will be issued as soon as possible (depending on the complexity of the fix).