From b3e34bee9733366f48bac1f51385120feed152c3 Mon Sep 17 00:00:00 2001 From: Stevenson Michel Date: Mon, 21 Sep 2026 10:25:49 -0400 Subject: [PATCH] [Devel] Bump django to >=5.2.17 (#16663) [Devel] CVE-2026-15307 - Bump django to >=5.2.17 Update django in requirements.in to address CVE-2026-15307. Regenerated requirements.txt via make docker_update_requirements. Co-authored-by: Claude Opus 4.6 --- requirements/requirements.in | 2 +- requirements/requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/requirements.in b/requirements/requirements.in index 0e73068aa2..3cb7e3dc12 100644 --- a/requirements/requirements.in +++ b/requirements/requirements.in @@ -13,7 +13,7 @@ cryptography Cython daphne>=4.2.2 distro -django>=5.2,<5.3 # Django 5.2 LTS, allow patch updates +django>=5.2.17,<5.3 # Django 5.2 LTS, allow patch updates, CVE-2026-15307 django-cors-headers django-crum django-extensions diff --git a/requirements/requirements.txt b/requirements/requirements.txt index 9c044f5382..c88ffb6a0a 100644 --- a/requirements/requirements.txt +++ b/requirements/requirements.txt @@ -123,7 +123,7 @@ dispatcherd[pg-notify]==2026.3.25 # via -r /awx_devel/requirements/requirements.in distro==1.9.0 # via -r /awx_devel/requirements/requirements.in -django==5.2.8 +django==5.2.17 # via # -r /awx_devel/requirements/requirements.in # channels