From 7da8e6cc8f7c409a8c7666a75009170e5eefc067 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 7 Dec 2024 22:36:58 +0000 Subject: [PATCH] fix: backend/requirements/base.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456315 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-8456316 --- backend/requirements/base.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements/base.txt b/backend/requirements/base.txt index 225feb69..c93d0c5a 100644 --- a/backend/requirements/base.txt +++ b/backend/requirements/base.txt @@ -8,7 +8,7 @@ hiredis==1.0.1 # https://github.com/redis/hiredis-py # Django # ------------------------------------------------------------------------------ -django==3.0.7 # pyup: < 3.1 # https://www.djangoproject.com/ +django==4.2.17 # pyup: < 3.1 # https://www.djangoproject.com/ django-environ==0.4.5 # https://github.com/joke2k/django-environ django-model-utils==4.0.0 # https://github.com/jazzband/django-model-utils django-allauth==0.42.0 # https://github.com/pennersr/django-allauth