Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Med] Snyk - Uncontrolled Memory Consumption #2691

Closed
Tracked by #137
pkfec opened this issue Feb 20, 2019 · 1 comment
Closed
Tracked by #137

[Med] Snyk - Uncontrolled Memory Consumption #2691

pkfec opened this issue Feb 20, 2019 · 1 comment
Assignees
@jason-upchurch
Labels
Security: moderate Remediate within 60 days
Milestone
Sprint 9.1

Comments

@pkfec
Copy link
Contributor

pkfec commented Feb 20, 2019

Vulnerable module: django

  • Introduced through: django-jinja@2.4.1, cg-django-uaa@1.3.0 and others

Detailed paths:

  • Introduced through: project@0.0.0 › django-jinja@2.4.1 › django@1.11.15
  • Introduced through: project@0.0.0 › cg-django-uaa@1.3.0 › django@1.11.15
  • Introduced through: project@0.0.0 › django@1.11.15

Remediation:
Upgrade django to version 1.11.19, 2.0.11, 2.1.6 or higher.
@pkfec pkfec changed the title Uncontrolled Memory Consumption [Med] Snyk - Uncontrolled Memory Consumption Feb 20, 2019
@pkfec pkfec mentioned this issue Feb 20, 2019
Closed
@rjayasekera rjayasekera mentioned this issue Feb 27, 2019
Closed
@fecjjeng fecjjeng mentioned this issue Mar 6, 2019
Closed
@hcaofec hcaofec mentioned this issue Mar 13, 2019
Closed
@rjayasekera rjayasekera mentioned this issue Mar 20, 2019
Closed
@qqss88 qqss88 mentioned this issue Mar 27, 2019
Closed
@lbeaufort lbeaufort added the Security: moderate Remediate within 60 days label May 20, 2019
@lbeaufort lbeaufort added this to the Sprint 9.1 milestone May 20, 2019
@jason-upchurch
Copy link
Contributor

Current django is django@1.11.20. Vulnerability no longer appears.

@patphongs patphongs mentioned this issue Feb 29, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jason-upchurch jason-upchurch

Labels
Security: moderate Remediate within 60 days
Projects
None yet
Milestone
Sprint 9.1
Development

No branches or pull requests
3 participants
@pkfec @lbeaufort @jason-upchurch