Only the latest release of DSFF (dsff on PyPI) receives security fixes.
Please do not report security vulnerabilities through public GitHub issues.
Instead, report them privately through GitHub's private vulnerability reporting (the repository's Security tab, then Report a vulnerability). Please include:
- the DSFF, openpyxl and (if relevant) pyarrow versions;
- the steps to reproduce the issue, and a sample file if relevant;
- the impact you expect.
You will get an answer as soon as possible. Once the issue is confirmed, a fix is released and the advisory is published.