From 58fb3e356714f7010e37c82deab038e1f01db667 Mon Sep 17 00:00:00 2001 From: DeepSource Bot Date: Fri, 16 May 2025 22:01:31 +0000 Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20PyPI/django=20from=204.2.?= =?UTF-8?q?16=20=E2=86=92=205.1.4=20fix(deps):=20update=20PyPI/django=20fr?= =?UTF-8?q?om=204.2.16=20=E2=86=92=205.1.4?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This pull request addresses security vulnerabilities in this repository by updating dependencies to a safe version. We recommend manually auditing the package manifest files to verify the fixes. ### Upgrade Summary **django**: 4.2.16 → 5.1.4 - Fixes [CVE-2024-53908](https://nvd.nist.gov/vuln/detail/CVE-2024-53908) (High severity) - References: - [https://nvd.nist.gov/vuln/detail/CVE-2024-53908](https://nvd.nist.gov/vuln/detail/CVE-2024-53908) - [https://docs.djangoproject.com/en/dev/releases/security](https://docs.djangoproject.com/en/dev/releases/security) - [https://github.com/django/django](https://github.com/django/django) - [https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-157.yaml](https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2024-157.yaml) - [https://groups.google.com/g/django-announce](https://groups.google.com/g/django-announce) - [https://www.djangoproject.com/weblog/2024/dec/04/security-releases](https://www.djangoproject.com/weblog/2024/dec/04/security-releases) - [https://www.openwall.com/lists/oss-security/2024/12/04/3](https://www.openwall.com/lists/oss-security/2024/12/04/3) - [https://docs.djangoproject.com/en/dev/releases/security/](https://docs.djangoproject.com/en/dev/releases/security/) --- 🤖 This pull request was automatically generated by DeepSource SCA. To view all vulnerabilities in this repository, please visit the [dashboard](https://app.deepsource.com/gh/QuackatronHQ/sca-kitchen-sink/dependencies/). --- python/requirements/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/requirements/requirements.txt b/python/requirements/requirements.txt index 1cd29de..a312754 100644 --- a/python/requirements/requirements.txt +++ b/python/requirements/requirements.txt @@ -2,7 +2,7 @@ asgiref==3.8.1 backports-tarfile==1.2.0 cffi==1.17.1 cryptography==43.0.0 -django==4.2.16 +django==5.1.4 importlib-metadata==8.5.0 jaraco-classes==3.4.0 jaraco-context==6.0.1