euinvoice parses untrusted XML and PDF input, so security reports are very welcome.

Do not open a public issue for vulnerabilities. Use GitHub's private vulnerability reporting instead. You will get an acknowledgement within a few days.

Only the latest released version receives security fixes.