We take the security of django-sudo seriously. If you believe you've identified a security vulnerability, please report it to matt@ydekproductions.com.
You may encrypt the message using the PGP fingerprint: D9D7 15C4 32A9 8C40 F794 35AB A54A 6FD1 5E45 9C77.
Once you've submitted an issue via email, you should receive an acknowledgement within 48 hours, and depending on the action to be taken, you may receive further follow-up emails.