Security fixes are released for the latest version on PyPI.

Please report vulnerabilities privately through GitHub's private vulnerability reporting rather than in a public issue. Include the affected version, platform, and steps to reproduce. You should receive a response within a week.

Messages are serialized with pickle, and unpickling data can run arbitrary code. Only exchange messages between processes you trust, as with multiprocessing.Queue. On Linux and macOS, shared-memory blocks are created readable and writable only by the current user.