flightlock is in early alpha (0.x). Security fixes will be released as patch versions on the latest 0.x line. There is no long-term support for older versions at this stage.

If you discover a security vulnerability, please do not open a public GitHub issue.

Instead, report it privately via GitHub's private vulnerability reporting, or email the maintainer directly at amoghagrao@gmail.com.

Please include:

• A description of the vulnerability and its potential impact
• Steps to reproduce
• Any relevant code or configuration

You can expect an initial response within a few days. Once a fix is available, it will be released and the reporter credited (unless anonymity is requested).

• RedisBackend uses pickle for serialization. Deserializing pickled data from an untrusted source can execute arbitrary code. Only use RedisBackend against a Redis instance you trust and control — do not point it at a Redis instance where untrusted parties can write keys.