Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix(deps): update dependency django to v4.2.7 [security] (#178)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [Django](https://www.djangoproject.com/) ([source](https://github.com/django/django), [changelog](https://github.com/django/django/tree/master/docs/releases)) | dependencies | patch | `4.2.3` -> `4.2.7` | ### GitHub Vulnerability Alerts #### [CVE-2023-46695](https://nvd.nist.gov/vuln/detail/CVE-2023-46695) An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters. --- ### Release Notes <details> <summary>django/django (Django)</summary> ### [`v4.2.7`](https://github.com/django/django/compare/4.2.6...4.2.7) [Compare Source](https://github.com/django/django/compare/4.2.6...4.2.7) ### [`v4.2.6`](https://github.com/django/django/compare/4.2.5...4.2.6) [Compare Source](https://github.com/django/django/compare/4.2.5...4.2.6) ### [`v4.2.5`](https://github.com/django/django/compare/4.2.4...4.2.5) [Compare Source](https://github.com/django/django/compare/4.2.4...4.2.5) ### [`v4.2.4`](https://github.com/django/django/compare/4.2.3...4.2.4) [Compare Source](https://github.com/django/django/compare/4.2.3...4.2.4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Asia/Jerusalem, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4xLjExIiwidXBkYXRlZEluVmVyIjoiMzYuMS4xMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==--> Co-authored-by: descope[bot] <descope[bot]@users.noreply.github.com>
- Loading branch information