Merge branch 'insecure-dependency' into 'develop'

Updated Pillow to 6.2 to fix DoS vulnerability See merge request funkwhale/funkwhale!946
2019-11-04 11:24:04 +01:00 · 2019-11-04 11:24:04 +01:00 · 147af7bce3
parent c9a2439ecc 1c215ac2f1
commit 147af7bce3
1 changed files with 1 additions and 1 deletions
--- a/api/requirements/base.txt
+++ b/api/requirements/base.txt
@ -5,7 +5,7 @@ django>=2.2.4,<2.3
 django-environ>=0.4,<0.5

 # Images
-Pillow>=5.4,<5.5
+Pillow>=6.2,<7

 # For user registration, either via email or social
 # Well-built with regular release cycles!