django-python3-ldap 0.9.5 is now available on GitHub and PyPi. This release fixes a security vulnerability where username and password could be transmitted in plain text before starting TLS.