geekforum issues

Bump pillow from 4.1.1 to 9.0.1 in /backend

Bumps [pillow](https://github.com/python-pillow/Pillow) from 4.1.1 to 9.0.1. Release notes Sourced from pillow's releases. 9.0.1 https://pillow.readthedocs.io/en/stable/releasenotes/9.0.1.html Changes In show_file, use os.remove to remove temporary images. CVE-2022-24303 #6010 [@radarhere, @hugovk] Restrict builtins within...

dependabot[bot]

dependencies

Bump django from 1.10.4 to 2.2.24 in /backend

Bumps [django](https://github.com/django/django) from 1.10.4 to 2.2.24. Commits 2da029d [2.2.x] Bumped version for 2.2.24 release. f27c38a [2.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses. 053cc95 [2.2.x] Fixed CVE-2021-33203 --...

dependabot[bot]

dependencies

Bump django-debug-toolbar from 1.8 to 1.11.1 in /backend

Bumps [django-debug-toolbar](https://github.com/jazzband/django-debug-toolbar) from 1.8 to 1.11.1. Changelog Sourced from django-debug-toolbar's changelog. 1.11.1 (2021-04-14) Fixed SQL Injection vulnerability, CVE-2021-30459. The toolbar now calculates a signature on all fields for the SQL...

dependabot[bot]

dependencies

Bump httplib2 from 0.10.3 to 0.19.0 in /backend

Bumps [httplib2](https://github.com/httplib2/httplib2) from 0.10.3 to 0.19.0. Changelog Sourced from httplib2's changelog. 0.19.0 auth: parse headers using pyparsing instead of regexp httplib2/httplib2#182 auth: WSSE token needs to be string not bytes...

dependabot[bot]

dependencies