diff mbox series

[layerindex-web,1/4] requirements: bump to fix vulnerabilities

Message ID 20260211195536.10278-1-tim.orling@konsulko.com
State New
Headers show
Series [layerindex-web,1/4] requirements: bump to fix vulnerabilities | expand

Commit Message

Tim Orling Feb. 11, 2026, 7:55 p.m. UTC
-Django>=4.2,<4.3
+Django>=4.2.28,<4.3
https://docs.djangoproject.com/en/dev/releases/4.2.28/
CVE: CVE-2025-13473
CVE: CVE-2025-14550
CVE: CVE-2026-1207
CVE: CVE-2026-1285
CVE: CVE-2026-1287
CVE: CVE-2026-1312

-django-simple-captcha==0.6.0
+django-simple-captcha==0.6.3
https://django-simple-captcha.readthedocs.io/en/latest/changes.html#version-0-6-3

-Pillow==10.4.0
+Pillow==12.1.1
https://pillow.readthedocs.io/en/stable/releasenotes/12.1.1.html
CVE: CVE-2026-25990

-sqlparse==0.5.1
+sqlparse==0.5.5
https://sqlparse.readthedocs.io/en/stable/changes.html#release-0-5-5-dec-19-2025

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
---
 requirements.txt | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)
diff mbox series

Patch

diff --git a/requirements.txt b/requirements.txt
index 15530a6..7a3806c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,4 @@ 
+-i https://pkgs.safetycli.com/repository/self-d8782/project/layerindex-web/pypi/simple/
 amqp==5.2.0
 asgiref==3.8.1
 beautifulsoup4==4.12.3
@@ -9,7 +10,7 @@  click-plugins==1.1.1
 click-repl==0.3.0
 confusable-homoglyphs==3.3.1
 diff-match-patch==20230430
-Django>=4.2,<4.3
+Django>=4.2.28,<4.3
 django-appconf==1.0.6
 django-axes==6.5.1
 django-cors-headers==4.4.0
@@ -18,21 +19,21 @@  django-ranged-response==0.2.0
 django-registration==3.4
 django-reversion==5.1.0
 django-reversion-compare==0.17.0
-django-simple-captcha==0.6.0
+django-simple-captcha==0.6.3
 djangorestframework==3.15.2
 gitdb==4.0.11
 GitPython==3.1.43
 kombu==5.4.0
 mysqlclient==2.2.4
 packaging_legacy==23.0.post0
-Pillow==10.4.0
+Pillow==12.1.1
 prompt-toolkit==3.0.47
 python-dateutil==2.9.0.post0
 pytz==2024.1
 six==1.16.0
 smmap==5.0.1
 soupsieve==2.6
-sqlparse==0.5.1
+sqlparse==0.5.5
 typing_extensions==4.12.2
 tzdata==2024.1
 vine==5.1.0