From a2e23f1e2008203280fce88cb59fbec31a1a1bb2 Mon Sep 17 00:00:00 2001 From: Tim Orling Date: Fri, 29 Sep 2023 08:02:46 -0700 Subject: [PATCH] build(deps): bump gitpython from 3.1.32 to 3.1.37 This release contains another security fix that further improves validation of symbolic references and thus properly fixes this CVE: https://github.com/advisories/GHSA-cwvm-v4w8-q58c (CVE-2023-41040). https://github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst Signed-off-by: Tim Orling --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index b86ac6e..5bc4659 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16,7 +16,7 @@ django-reversion-compare==0.14.1 django-simple-captcha==0.5.14 djangorestframework==3.13.1 gitdb==4.0.9 -GitPython==3.1.32 +GitPython==3.1.37 kombu==5.2.3 mysqlclient==2.1.0 Pillow==9.3.0