AAP-64830: fix CVE-2026-1207.

omaciel · omaciel · commit db1439d9a496 · 2026-02-06T08:53:53.000-05:00
Django: SQL Injection via RasterField band index parameter
diff --git a/pyproject.toml b/pyproject.toml
@@ -15,7 +15,7 @@ dependencies = [
   'cbor2~=5.8.0',
   'cython',
   'daphne~=4.2.1',
-  'Django~=4.2.27',
+  'Django~=4.2.28',
   'django-deprecate-fields~=0.1.1',
   'django-extensions~=3.2.1',
   'django-health-check~=3.17.0',
diff --git a/requirements.txt b/requirements.txt
@@ -110,7 +110,7 @@ diff-match-patch==20241021
     # via django-import-export
 distro==1.9.0
     # via llama-stack-client
-django==4.2.27
+django==4.2.28
     # via
     #   ansible-ai-connect
     #   django-allow-cidr
diff --git a/uv.lock b/uv.lock
