Skip to content

fix(deps): upgrade wagtail to 7.3.4 for security fixes - #239

Merged
matrixise merged 1 commit into
masterfrom
security/upgrade-wagtail
Sep 24, 2026
Merged

matrixise merged 1 commit into
masterfrom
security/upgrade-wagtail

Conversation

@matrixise

Copy link
Copy Markdown
Contributor

Summary

Test plan

  • python manage.py test pythonie --settings=pythonie.settings.tests (SQLite, 7/7 passed)
  • ruff check pythonie clean

Resolves multiple high/medium severity Dependabot alerts covering
improper permission/restriction handling (Pages, translation, snippet
copy, Documents/Images API, image preview), document SHA1 disclosure,
reflected XSS in the dynamic image URL view, and a DoS via unbounded
filter specs.

GHSA-3vrh-m9w7-v94f, GHSA-jm5p-837g-rv8g, GHSA-x5cx-w6p2-mxf2,
GHSA-c2xx-cjmh-9q8f, GHSA-92hv-j533-69wc, GHSA-r6p4-grq7-xm4m,
GHSA-8634-mr4j-r72c, GHSA-f2p5-j6fg-5cxf, GHSA-23m2-mghx-vqmf,
GHSA-h54r-xq46-qwqm

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant