From 2a8de632bff1d1005fc4e59663a076811cd4be39 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Wirtel?= Date: Thu, 24 Sep 2026 07:51:39 +0200 Subject: [PATCH] fix(deps): upgrade djangorestframework to 3.18.1 for security fixes Resolves medium severity Dependabot alerts: a potential bypass of Django's DATA_UPLOAD_MAX_MEMORY_SIZE when parsing oversized JSON and urlencoded bodies via DRF request.data, and disclosure of GET-protected data by AdminRenderer when rendering invalid write requests. GHSA-2m8g-3cmr-wg3w, GHSA-g47c-3xmw-q6m2 Co-Authored-By: Claude Sonnet 5 --- requirements/dev.txt | 2 +- requirements/main.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/dev.txt b/requirements/dev.txt index 3a0e78d..7cf9a6c 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -80,7 +80,7 @@ django-treebeard==4.8.0 # via # -c requirements/main.txt # wagtail -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via # -c requirements/main.txt # wagtail diff --git a/requirements/main.txt b/requirements/main.txt index 09c799c..30b053d 100644 --- a/requirements/main.txt +++ b/requirements/main.txt @@ -83,7 +83,7 @@ django-tasks==0.9.0 # wagtail django-treebeard==4.8.0 # via wagtail -djangorestframework==3.17.1 +djangorestframework==3.18.1 # via wagtail draftjs-exporter==5.2.0 # via wagtail