To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.
Special note for this backport repository: This project is a backport of the canonical implementation in the standard library and does not receive independent updates. Therefore, any bug reports should be directed to the upstream project instead of here.