Skip to content

Commit 19e683f

Browse files
matrixiseclaude
andcommitted
fix(deps): upgrade wagtail to 7.3.4 for security fixes
Resolves multiple high/medium severity Dependabot alerts covering improper permission/restriction handling (Pages, translation, snippet copy, Documents/Images API, image preview), document SHA1 disclosure, reflected XSS in the dynamic image URL view, and a DoS via unbounded filter specs. GHSA-3vrh-m9w7-v94f, GHSA-jm5p-837g-rv8g, GHSA-x5cx-w6p2-mxf2, GHSA-c2xx-cjmh-9q8f, GHSA-92hv-j533-69wc, GHSA-r6p4-grq7-xm4m, GHSA-8634-mr4j-r72c, GHSA-f2p5-j6fg-5cxf, GHSA-23m2-mghx-vqmf, GHSA-h54r-xq46-qwqm Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
1 parent 6990b97 commit 19e683f

2 files changed

Lines changed: 2 additions & 2 deletions

File tree

‎requirements/dev.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -214,7 +214,7 @@ urllib3==2.7.0
214214
# requests
215215
uv==0.11.19
216216
# via -r requirements/dev.in
217-
wagtail==7.3.2
217+
wagtail==7.3.4
218218
# via
219219
# -c requirements/main.txt
220220
# wagtail-factories

‎requirements/main.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -181,7 +181,7 @@ urllib3==2.7.0
181181
# via
182182
# botocore
183183
# requests
184-
wagtail==7.3.2
184+
wagtail==7.3.4
185185
# via -r requirements/main.in
186186
whitenoise==6.12.0
187187
# via -r requirements/main.in

0 commit comments

Comments
 (0)