Release: Merge release into master from: release/2.45.2

[github-actions]

Release triggered by rossops

[dryrunsecurity]

🔴 Risk threshold exceeded.

This pull request involves sensitive edits to multiple files in the project, including database migrations, models, templates, and utility files, and includes modifications to various parsers to mark MD5 hash generation as not used for security purposes.

⚠️ Configured Codepaths Edit in dojo/db_migrations/0226_import_history_left_untouched_rename.py

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

⚠️ Configured Codepaths Edit in dojo/models.py

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

⚠️ Configured Codepaths Edit in dojo/product/helpers.py

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

⚠️ Configured Codepaths Edit in dojo/templates/base.html

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

⚠️ Configured Codepaths Edit in dojo/utils.py

Vulnerability	Configured Codepaths Edit
Description	Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

💭 Unconfirmed Findings (14)

Vulnerability	Blackduck
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	Bugcrowd
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	Bundler Audit
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	Cobalt
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	GGShield
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	Gitleaks
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	H1
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	HuskyCI
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	IBM App
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	ImmuniWeb
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	Kiuwan
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	Mend
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	NeuVector Compliance
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

Vulnerability	Noseyparker
Description	Parser modified to add usedforsecurity=False to MD5 hash generation

We've notified @mtesauro.

---

All finding details can be found in the DryRun Security Dashboard.