CodeForAfrica / sensors.AFRICA-api

The sensors.AFRICA API receiving, storing, and processing data received from sensors across the continentent. Accessible at https://api.sensors.africa/
https://api.sensors.africa/
18 stars 7 forks source link

fix security vulnerability #36

Closed karimkawambwa closed 5 years ago

karimkawambwa commented 5 years ago

Description

Upgrade django to version 1.11.19

moderate severity

CVE-2019-6975 More information Vulnerable versions: < 1.11.19 Patched version: 1.11.19

Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.

Fixes # (issue)

Type of change

Please delete options that are not relevant.

Checklist: