Pin Django to 3.2.20 to remediate ReDoS CVE-2023-36053

.github/PULL_REQUEST_TEMPLATE/dependency-bump.md

@@ -0,0 +1,28 @@
+Title: Bump dependency: <package> to <new-version>
+
+Summary
+- **Why**: Reference advisory/CVE and brief reason for the bump.
+- **Files changed**: `requirements.txt` (or relevant file) with bumped version(s).
+
+Testing
+- Run unit tests: `pytest -q`
+- Run lint: `flake8` / `ruff` (repo-specific)
+- Smoke test web endpoints: run dev server and exercise a few endpoints.
+
+Local reproduction
+```bash
+python -m venv .venv
+.venv\Scripts\activate    # Windows
+pip install -r requirements.txt
+pip install <package>==<new-version>
+pytest -q
+```
+
+Checklist
+- [ ] Version pinned/updated in `requirements.txt`
+- [ ] All tests pass in CI
+- [ ] No runtime regressions in smoke tests
+- [ ] PR description contains CVE/advisory links and short risk assessment
+
+Rollback
+- Steps to revert quickly if issues are detected.

bandit_core_results.json

@@ -0,0 +1,72 @@
+{
+  "errors": [],
+  "generated_at": "2025-12-20T04:43:20Z",
+  "metrics": {
+    "E:\\anup_project\\aixblock-ai-dev-platform-public\\main.py": {
+      "CONFIDENCE.HIGH": 0,
+      "CONFIDENCE.LOW": 0,
+      "CONFIDENCE.MEDIUM": 0,
+      "CONFIDENCE.UNDEFINED": 0,
+      "SEVERITY.HIGH": 0,
+      "SEVERITY.LOW": 0,
+      "SEVERITY.MEDIUM": 0,
+      "SEVERITY.UNDEFINED": 0,
+      "loc": 6,
+      "nosec": 0,
+      "skipped_tests": 0
+    },
+    "E:\\anup_project\\aixblock-ai-dev-platform-public\\migrate.py": {
+      "CONFIDENCE.HIGH": 0,
+      "CONFIDENCE.LOW": 0,
+      "CONFIDENCE.MEDIUM": 0,
+      "CONFIDENCE.UNDEFINED": 0,
+      "SEVERITY.HIGH": 0,
+      "SEVERITY.LOW": 0,
+      "SEVERITY.MEDIUM": 0,
+      "SEVERITY.UNDEFINED": 0,
+      "loc": 13,
+      "nosec": 0,
+      "skipped_tests": 0
+    },
+    "E:\\anup_project\\aixblock-ai-dev-platform-public\\setup_core.py": {
+      "CONFIDENCE.HIGH": 0,
+      "CONFIDENCE.LOW": 0,
+      "CONFIDENCE.MEDIUM": 0,
+      "CONFIDENCE.UNDEFINED": 0,
+      "SEVERITY.HIGH": 0,
+      "SEVERITY.LOW": 0,
+      "SEVERITY.MEDIUM": 0,
+      "SEVERITY.UNDEFINED": 0,
+      "loc": 13,
+      "nosec": 0,
+      "skipped_tests": 0
+    },
+    "E:\\anup_project\\aixblock-ai-dev-platform-public\\worker.py": {
+      "CONFIDENCE.HIGH": 0,
+      "CONFIDENCE.LOW": 0,
+      "CONFIDENCE.MEDIUM": 0,
+      "CONFIDENCE.UNDEFINED": 0,
+      "SEVERITY.HIGH": 0,
+      "SEVERITY.LOW": 0,
+      "SEVERITY.MEDIUM": 0,
+      "SEVERITY.UNDEFINED": 0,
+      "loc": 6,
+      "nosec": 0,
+      "skipped_tests": 0
+    },
+    "_totals": {
+      "CONFIDENCE.HIGH": 0,
+      "CONFIDENCE.LOW": 0,
+      "CONFIDENCE.MEDIUM": 0,
+      "CONFIDENCE.UNDEFINED": 0,
+      "SEVERITY.HIGH": 0,
+      "SEVERITY.LOW": 0,
+      "SEVERITY.MEDIUM": 0,
+      "SEVERITY.UNDEFINED": 0,
+      "loc": 38,
+      "nosec": 0,
+      "skipped_tests": 0
+    }
+  },
+  "results": []
+}