If you find what you think might be a security vulnerability with convtools, please do not create an issue on github. Instead please email nikita.almakov@gmail.com, I'll reply to your email and try to get a patch out ASAP.