Here is PyUp (safety) response: https://pyup.io/posts/patched-vulnerability/