CVE-2023-36053

Advisory

Django-descope 1.3.0 updates its dependency 'django' to v4.2.3 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed


New features
* Add support for custom User subclasses by Cleptomania in https://github.com/descope/django-descope/pull/171

Internal dependencies
* fix(deps): update dependency django to v4.2.3 [security] by descope in https://github.com/descope/django-descope/pull/161
* chore(deps): update dependency pre-commit to v3.3.3 by descope in https://github.com/descope/django-descope/pull/162
* chore(deps): update dependency django-stubs to v4.2.2 by descope in https://github.com/descope/django-descope/pull/164
* chore(deps): update dependency django-stubs to v4.2.3 by descope in https://github.com/descope/django-descope/pull/165
* chore(deps): update dependency black to v23.7.0 by descope in https://github.com/descope/django-descope/pull/167
* chore(deps): update dependency flake8 to v6.1.0 by descope in https://github.com/descope/django-descope/pull/169
* chore(deps): Bump cryptography from 41.0.1 to 41.0.3 by dependabot in https://github.com/descope/django-descope/pull/168

New Contributors
* Cleptomania made their first contribution in https://github.com/descope/django-descope/pull/171

**Full Changelog**: https://github.com/descope/django-descope/compare/v1.2.0...V1.2.1

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36053