IQDraw executes build specifications as Python code. Only render specifications you wrote yourself or have reviewed and trust; a .py build file has the same access as any other Python program you run.

Please report a suspected vulnerability privately to the repository owner instead of opening a public issue. Include the affected version, a minimal reproduction, and the impact. General rendering bugs belong in the public bug report template.