Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update django to pick up CVEs #188

Merged
merged 1 commit into from
May 17, 2024
Merged

Conversation

trashhalo
Copy link
Contributor

@trashhalo trashhalo commented May 15, 2024

CVE-2022-28346 as example. but handful found in google container scanning

@trashhalo
Copy link
Contributor Author

Heres the full list of django vulnerabilities in doctor
Screenshot 2024-05-15 at 3 07 36 PM

@mlissner
Copy link
Member

Hm, lots of failing tests. I wonder if that's just because other things are broken. Perhaps #187 will fix that....

@mlissner
Copy link
Member

I don't see fixes in #187 that'd help here, so I think these are things that genuinely get broken by the upgrade.

@trashhalo
Copy link
Contributor Author

It looks like the server is returning 500s but I don't see the server logs in the test failures. Do you know how to see that?

@mlissner
Copy link
Member

You know, I really can't imagine how this version bump of Django would cause so much wreckage. I'm going to just merge, and we'll get this fixed in another PR if needed. Thank you!

@mlissner mlissner merged commit 1ec9644 into freelawproject:main May 17, 2024
3 of 4 checks passed
@trashhalo trashhalo deleted the patch-1 branch May 17, 2024 23:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants