mirror of
https://github.com/django/django.git
synced 2025-10-31 09:41:08 +00:00
Bumped minimum Pillow version to 6.2.0 in test requirements.
Pillow < 6.2.0 is vulnerable to CVE-2019-16865.
This commit is contained in:
@@ -5,7 +5,7 @@ docutils
|
||||
geoip2
|
||||
jinja2 >= 2.9.2
|
||||
numpy
|
||||
Pillow != 5.4.0
|
||||
Pillow >= 6.2.0
|
||||
# pylibmc/libmemcached can't be built on Windows.
|
||||
pylibmc; sys.platform != 'win32'
|
||||
python-memcached >= 1.59
|
||||
|
||||
Reference in New Issue
Block a user