Skip to content

Commit

Permalink
fix(deps): update dependency django to v4.2.7 [security] (#178)
Browse files Browse the repository at this point in the history
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [Django](https://www.djangoproject.com/)
([source](https://github.com/django/django),
[changelog](https://github.com/django/django/tree/master/docs/releases))
| dependencies | patch | `4.2.3` -> `4.2.7` |

### GitHub Vulnerability Alerts

#### [CVE-2023-46695](https://nvd.nist.gov/vuln/detail/CVE-2023-46695)

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13,
and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a
consequence, django.contrib.auth.forms.UsernameField is subject to a
potential DoS (denial of service) attack via certain inputs with a very
large number of Unicode characters.

---

### Release Notes

<details>
<summary>django/django (Django)</summary>

### [`v4.2.7`](https://github.com/django/django/compare/4.2.6...4.2.7)

[Compare
Source](https://github.com/django/django/compare/4.2.6...4.2.7)

### [`v4.2.6`](https://github.com/django/django/compare/4.2.5...4.2.6)

[Compare
Source](https://github.com/django/django/compare/4.2.5...4.2.6)

### [`v4.2.5`](https://github.com/django/django/compare/4.2.4...4.2.5)

[Compare
Source](https://github.com/django/django/compare/4.2.4...4.2.5)

### [`v4.2.4`](https://github.com/django/django/compare/4.2.3...4.2.4)

[Compare
Source](https://github.com/django/django/compare/4.2.3...4.2.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" in timezone Asia/Jerusalem,
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4xLjExIiwidXBkYXRlZEluVmVyIjoiMzYuMS4xMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: descope[bot] <descope[bot]@users.noreply.github.com>
  • Loading branch information
descope[bot] and descope[bot] authored Nov 2, 2023
1 parent c469261 commit a2aea1f
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions poetry.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

0 comments on commit a2aea1f

Please sign in to comment.