From 0e26e9e903661ee002aed4c910b04a628016f658 Mon Sep 17 00:00:00 2001
From: Muhammad Naufal Mahdi <053792227@ecampus.ut.ac.id>
Date: Fri, 17 Jul 2026 16:08:21 +0700
Subject: [PATCH] Bump Django from 5.1.13 to 5.1.15

Security fixes:
- PYSEC-2025-108 (CVSS 9.1): DoS via HttpResponseRedirect on Windows (GHSA-frmv-pr5f-9mcr)
- PYSEC-2025-107 (CVSS 7.5): unspecified Django fix (GHSA-qw25-v68c-qjf3)
- PYSEC-2025-109 (CVSS 7.5): DoS via XML serializer text extraction (GHSA-vrcr-9hj9-jcg6)
- PYSEC-2025-104 (CVSS 4.3): SQL injection in column aliases (GHSA-rqw2-ghq9-44m7)

All advisories confirmed cleared by osv-scanner after patch.
---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index adda81a1..5d85d344 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -39,7 +39,7 @@ cryptography==46.0.3
 cyclonedx-python-lib==11.2.0
 debian_inspector==31.1.1
 defusedxml==0.7.1
-Django==5.1.13
+Django==5.1.15
 django-crispy-forms==2.4
 django-environ==0.12.0
 django-filter==25.1