doableware / djongo

Django and MongoDB database connector
https://www.djongomapper.com
GNU Affero General Public License v3.0
1.86k stars 351 forks source link

SECURITY ISSUE: Django==1.3.6 requires SQLParse==0.2.4 which has some security issues as flagged by Snaky #657

Open DheerendraTomar opened 1 year ago

DheerendraTomar commented 1 year ago

The link to Snyk security report. Snyk report link.

When I try to upgrade to SQLParse==0.4.2, Djongo doesn't let it be upgraded to the latest version. Please fix this issue.

This is when I install Djongo using pip install djongo