Skip to content

Commit 6c52116

Browse files
chore(django): update django to 5.1.12 due to security problems (#8746)
Co-authored-by: Josema Camacho <josema@prowler.com>
1 parent a1168e3 commit 6c52116

3 files changed

Lines changed: 27 additions & 6 deletions

File tree

api/CHANGELOG.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,25 @@
22

33
All notable changes to the **Prowler API** are documented in this file.
44

5+
## [1.14.0] (Prowler UNRELEASED)
6+
7+
### Added
8+
- Default JWT keys are generated and stored if they are missing from configuration [(#8655)](https://github.com/prowler-cloud/prowler/pull/8655)
9+
- `compliance_name` for each compliance [(#7920)](https://github.com/prowler-cloud/prowler/pull/7920)
10+
11+
### Changed
12+
- Now the MANAGE_ACCOUNT permission is required to modify or read user permissions instead of MANAGE_USERS [(#8281)](https://github.com/prowler-cloud/prowler/pull/8281)
13+
- Now at least one user with MANAGE_ACCOUNT permission is required in the tenant [(#8729)](https://github.com/prowler-cloud/prowler/pull/8729)
14+
15+
---
16+
17+
## [1.13.1] (Prowler 5.12.2)
18+
19+
### Security
20+
- Django updated to the latest 5.1 security release, 5.1.12, due to [problems](https://www.djangoproject.com/weblog/2025/sep/03/security-releases/) with potential SQL injection in FilteredRelation column aliases [(#8693)](https://github.com/prowler-cloud/prowler/pull/8693)
21+
22+
---
23+
524
## [1.13.0] (Prowler 5.12.0)
625

726
### Added
@@ -21,6 +40,8 @@ All notable changes to the **Prowler API** are documented in this file.
2140
### Fixed
2241
- GitHub provider always scans user instead of organization when using provider UID [(#8587)](https://github.com/prowler-cloud/prowler/pull/8587)
2342

43+
---
44+
2445
## [1.11.0] (Prowler 5.10.0)
2546

2647
### Added

api/poetry.lock

Lines changed: 5 additions & 5 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

api/pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ authors = [{name = "Prowler Engineering", email = "engineering@prowler.com"}]
77
dependencies = [
88
"celery[pytest] (>=5.4.0,<6.0.0)",
99
"dj-rest-auth[with_social,jwt] (==7.0.1)",
10-
"django==5.1.10",
10+
"django (==5.1.12)",
1111
"django-allauth[saml] (>=65.8.0,<66.0.0)",
1212
"django-celery-beat (>=2.7.0,<3.0.0)",
1313
"django-celery-results (>=2.5.1,<3.0.0)",

0 commit comments

Comments
 (0)