freedomofpress / securethenews

An automated scanner and web dashboard for tracking TLS deployment across news organizations
https://securethe.news
GNU Affero General Public License v3.0
100 stars 29 forks source link

Fix safety failures #245

Closed chigby closed 4 years ago

chigby commented 4 years ago

This pull request updates Django to 2.2.14 to fix some security vulnerabilities and also instructs safety to ignore several vulnerabilities in the Pillow library until the wagtail LTS branch relaxes its dependency on the pillow 6.2.x branch, which is no longer supported.

I also updated the rsa package to the latest version, fixing a vulnerability documented at CVE-2020-13757.

Also added a new hash for the draftjs-exporter package, as it was published in wheel form recently (see commit for more info).