If you have found a security issue in sorl-thumbnail, please do not open a public GitHub issue or pull request, or anything else that could leak sensitive information to the public.

Report it privately instead, through GitHub's private vulnerability reporting.

A maintainer will reply acknowledging your report and then, depending on the action to be taken, with further follow-ups.