Conversation
Coverage summary from CodacySee diff coverage on Codacy
Coverage variation details
Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: Diff coverage details
Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: See your quality gate settings Change summary preferences |
| @@ -1,3 +1,3 @@ | |||
| flask==1.0.2 | |||
| django==1.11.29 | |||
| django==4.2.24 | |||
There was a problem hiding this comment.
ℹ️ Codacy found a minor Security issue: Insecure dependency pypi/django@4.2.24 (CVE-2025-59682: django: Potential partial directory-traversal via archive.extract()) (update to 4.2.25)
The issue identified by the Trivy linter is a security vulnerability in Django version 4.2.24, specifically a potential partial directory-traversal vulnerability that could be exploited via the archive.extract() method. This vulnerability is classified under CVE-2025-59682. To mitigate this security risk, it is recommended to update Django to a patched version, which is 4.2.25 or later.
To fix this issue, you simply need to update the version of Django in your requirements file. Here’s the code suggestion to apply the fix:
| django==4.2.24 | |
| django==4.2.25 |
This comment was generated by an experimental AI tool.
No description provided.