From 19e683f85dd4d92fa8bb2e0eb9d799d754de5de7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Wirtel?= Date: Thu, 24 Sep 2026 07:51:24 +0200 Subject: [PATCH] fix(deps): upgrade wagtail to 7.3.4 for security fixes Resolves multiple high/medium severity Dependabot alerts covering improper permission/restriction handling (Pages, translation, snippet copy, Documents/Images API, image preview), document SHA1 disclosure, reflected XSS in the dynamic image URL view, and a DoS via unbounded filter specs. GHSA-3vrh-m9w7-v94f, GHSA-jm5p-837g-rv8g, GHSA-x5cx-w6p2-mxf2, GHSA-c2xx-cjmh-9q8f, GHSA-92hv-j533-69wc, GHSA-r6p4-grq7-xm4m, GHSA-8634-mr4j-r72c, GHSA-f2p5-j6fg-5cxf, GHSA-23m2-mghx-vqmf, GHSA-h54r-xq46-qwqm Co-Authored-By: Claude Sonnet 5 --- requirements/dev.txt | 2 +- requirements/main.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/dev.txt b/requirements/dev.txt index dcb4e49..69df7eb 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -214,7 +214,7 @@ urllib3==2.7.0 # requests uv==0.11.19 # via -r requirements/dev.in -wagtail==7.3.2 +wagtail==7.3.4 # via # -c requirements/main.txt # wagtail-factories diff --git a/requirements/main.txt b/requirements/main.txt index 8abd3b5..f0de1c2 100644 --- a/requirements/main.txt +++ b/requirements/main.txt @@ -181,7 +181,7 @@ urllib3==2.7.0 # via # botocore # requests -wagtail==7.3.2 +wagtail==7.3.4 # via -r requirements/main.in whitenoise==6.12.0 # via -r requirements/main.in