From 9f15f267a10f7eda660725c38f925452dcd1d16e Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 7 Jun 2024 04:31:51 +0000 Subject: [PATCH] fix: conf/requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1066259 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1076802 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1090612 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1279042 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1290072 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1298665 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-1298666 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2312875 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2329158 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2329159 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2329160 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2389002 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2389021 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2606966 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2606969 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2940618 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-2968205 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-3319450 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-5496950 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-5750790 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-5880505 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-5932095 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-6041515 - https://snyk.io/vuln/SNYK-PYTHON-DJANGO-6370660 - https://snyk.io/vuln/SNYK-PYTHON-GUNICORN-6615672 - https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-3180412 - https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-1584201 - https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-5426157 - https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-6615674 --- conf/requirements.txt | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/conf/requirements.txt b/conf/requirements.txt index e7c7ee28..bae48917 100644 --- a/conf/requirements.txt +++ b/conf/requirements.txt @@ -1,11 +1,11 @@ beautifulsoup4==4.9.3 -Django==2.2.16 +Django==3.2.25 django-bootstrap4==2.2.0 django-icons==2.1.1 django-login-required-middleware==0.5.0 django-otp==1.0.1 django-qr-code==1.3.1 -gunicorn==20.0.4 +gunicorn==22.0.0 importlib-metadata==1.7.0 libsass==0.20.1 libvirt-python==6.7.0 @@ -16,6 +16,7 @@ qrcode==6.1 rwlock==0.0.7 six==1.15.0 soupsieve==2.0.1 -sqlparse==0.4.1 +sqlparse==0.5.0 websockify==0.9.0 zipp==3.3.0 +setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability