graphite-project / graphite-project/graphite-web
Django CVEs fixed in 4.2.30
Nobody has claimed this yet.
- Dominant language
- JavaScript
- Stars
- 6.1k
- Forks
- 1.3k
- PR merge metrics
- No merged PRs in 30d
Description
Is your feature request related to a problem? Please describe.
Hello, there are CVE in the django version you are using that are fixed in 4.2.30. Can you update it ? See this link: https://docs.djangoproject.com/en/dev/releases/4.2.30/
Describe the solution you'd like
Would it be possible to provide a new tag on more a recent commit with the fixes ? Thank you.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the Django dependency declaration in the repository and review the linked Django 4.2.30 release notes for the relevant fixes. Update the dependency to 4.2.30, verify the project still installs and its existing checks pass, and confirm that a new commit or tag includes the update.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- django, python
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 68/100