From c837b159eca72b6106cca913175a27414c3361ed Mon Sep 17 00:00:00 2001 From: DeepSource Bot Date: Fri, 21 Mar 2025 07:57:09 +0000 Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20PyPI/django=20from=204.2.?= =?UTF-8?q?16=20=E2=86=92=205.0.13=20fix(deps):=20update=20PyPI/django=20f?= =?UTF-8?q?rom=204.2.16=20=E2=86=92=205.0.13?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes. ### Upgrade Summary **django**: 4.2.16 → 5.0.13 - Fixes [CVE-2025-26699](https://nvd.nist.gov/vuln/detail/CVE-2025-26699) (Medium severity) - References: - [https://nvd.nist.gov/vuln/detail/CVE-2025-26699](https://nvd.nist.gov/vuln/detail/CVE-2025-26699) - [https://docs.djangoproject.com/en/dev/releases/security](https://docs.djangoproject.com/en/dev/releases/security) - [https://github.com/django/django](https://github.com/django/django) - [https://groups.google.com/g/django-announce](https://groups.google.com/g/django-announce) - [https://lists.debian.org/debian-lts-announce/2025/03/msg00012.html](https://lists.debian.org/debian-lts-announce/2025/03/msg00012.html) - [https://www.djangoproject.com/weblog/2025/mar/06/security-releases](https://www.djangoproject.com/weblog/2025/mar/06/security-releases) - [http://www.openwall.com/lists/oss-security/2025/03/06/12](http://www.openwall.com/lists/oss-security/2025/03/06/12) --- 🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.com/gh/QuackatronHQ/sca-kitchen-sink/dependencies/). --- python/requirements/requirements.in | 2 +- python/requirements/requirements.txt | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/python/requirements/requirements.in b/python/requirements/requirements.in index aba2761..8b8d1bb 100644 --- a/python/requirements/requirements.in +++ b/python/requirements/requirements.in @@ -1,4 +1,4 @@ -django >=4.2.* +django==5.0.13 pillow >=10.1.* keyring ==25.3.0 cryptography ~=43.0.0 diff --git a/python/requirements/requirements.txt b/python/requirements/requirements.txt index 1cd29de..b990cb5 100644 --- a/python/requirements/requirements.txt +++ b/python/requirements/requirements.txt @@ -2,7 +2,7 @@ asgiref==3.8.1 backports-tarfile==1.2.0 cffi==1.17.1 cryptography==43.0.0 -django==4.2.16 +django==5.0.13 importlib-metadata==8.5.0 jaraco-classes==3.4.0 jaraco-context==6.0.1 @@ -14,7 +14,7 @@ pillow==10.4.0 pycparser==2.22 pywin32-ctypes==0.2.3 secretstorage==3.3.3 -sqlparse==0.5.2 +sqlparse==0.5.3 typing-extensions==4.12.2 tzdata==2024.2 zipp==3.21.0