The deployangel package runs inside production apps, so security reports come first.

Please don't open a public issue. Report it privately instead:

• through GitHub: the repository's Security tab, then Report a vulnerability
• or by email to support@deployangel.com, with "Security" in the subject

Include what you found, how to reproduce it, and the package, Python, and framework versions. You'll hear back within a few days. Once it's fixed, you're welcome to be credited in the changelog.

The same addresses work for problems with the DeployAngel service itself (app.deployangel.com and api.deployangel.com).

Fixes go into the latest release. Upgrade to get them.