CVE-2021-44420

Advisory

Burl 2.0.0 updates its dependency 'django' to v2.2.25 to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

------

* changelog
* meta
* update Dockerfile and lock file
* remove deprecated app and update bookmarklet
* bump django-burl version to get management commands
* change activation of django\_extensions
* remove erroneous Pipfile entry
* update Pipfile.lock
* fix logging config
* update README and tests
* use BriefURLDefaultRedirect for default site redirect
* update admin settings
* update conf
* enable sites framework
* update paths to match django\_burl
* add v2 api
* bump cfitall version
* update settings to use cfitall
* update to django4 and update dependencies
* upgrade to django 3
* remove tests from (unused) redirects module and added deprecation notice
* restore hastily removed files
* embeds django-burl
* last commit before v2
* add pyproject.toml
* Bump django from 2.2.22 to 2.2.25
* Bump urllib3 from 1.26.4 to 1.26.5
* improvements for working with jwt more securely
* remove garbage
* fix swagger and add jwt
* add filter support, update libs, minor refactor

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44420