search

stephenmcd / mezzanine

CMS framework for Django
http://mezzanine.jupo.org
BSD 2-Clause "Simplified" License
4.76k stars 1.65k forks source link

Increase maximum version of Pillow #1986

Closed gherkz closed 3 years ago

gherkz commented 3 years ago

Addresses multiple CVEs (listed in https://github.com/stephenmcd/mezzanine/issues/1985).

I couldn't work out how to successfully run the tests, so can't confirm if this doesn't break anything.

jerivas commented 3 years ago

Thanks! I've gone with less strict version requirements in general. See https://github.com/stephenmcd/mezzanine/commit/721847e84bf2af8bb31e2877bace827e8ae6655d.