Closed anders314159 closed 1 month ago
Absolutely. just so you know, you can generate patches from https://github.com/TheRacetrack/racetrack/security/dependabot In my opinion, next time you can make them without asking in the issue, we can always discuss in Pull request.
There are a bunch of CVE's for our current Django version, 4.2.13. 4.2.14 is the patched version. I am unsure as to whether or not we use any of the affected functions mentioned below, but I'd rather just upgrade either way.
See: https://github.com/advisories/GHSA-qg2p-9jwr-mmqf https://github.com/advisories/GHSA-9jmf-237g-qf46 https://github.com/advisories/GHSA-x7q2-wr7g-xqmf https://github.com/advisories/GHSA-f6f8-9mx6-9mx2