CVE-2020-24583

Advisory

Django-bootstrap4 2.3.0 updates its dependency 'Django' to v3.1.2 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- Updated default Bootstrap to 4.5.2.
- Updated CSS/JavaScript URLs to newer versions (thanks emmceemoore).
- Replace `m2r` with `m2r2` to support Sphinx3.
- Update Sphinx dependency because of security update.
- Use Django 3.1 in `tox` matrix, fix warning in tests.
- Add `tox` to development dependencies.
- Accept importlib-metadata 2.x.x (thanks dbaty).
- Add Python 3.9 to tox matrix.

Resources

• https://pypi.org/project/django-bootstrap4
• https://pyup.io/changelogs/django-bootstrap4/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24583