Please report security vulnerabilities using GitHub's private vulnerability reporting rather than filing a public issue.

kogo parses untrusted PDF files with native libraries (PyMuPDF/MuPDF, OpenCV). Keep your installation and its dependencies up to date, and treat PDFs from untrusted sources with the same caution you would apply to any other untrusted native-code-parsed file format.