Only the latest release of BinStat (binstat on PyPI) receives security fixes.
Please do not report security vulnerabilities through public GitHub issues.
Instead, report them privately through GitHub's private vulnerability reporting (the repository's Security tab, then Report a vulnerability). Please include:
- the BinStat, numpy and (for training) scikit-learn versions;
- the steps to reproduce the issue, and a sample (or its hash) if relevant;
- the impact you expect.
You will get an answer as soon as possible. Once the issue is confirmed, a fix is released and the advisory is published.