From f58dd3965438659fd82041607cb929553cfe3618 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 16 Dec 2025 23:04:26 +0000
Subject: [PATCH] deps(dev): bump django from 3.0.0 to 5.2.9

Bumps [django](https://github.com/django/django) from 3.0.0 to 5.2.9.
- [Commits](https://github.com/django/django/compare/3.0...5.2.9)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.9
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 vulnerable-app/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vulnerable-app/requirements.txt b/vulnerable-app/requirements.txt
index 2a4d9ce..e191ed6 100644
--- a/vulnerable-app/requirements.txt
+++ b/vulnerable-app/requirements.txt
@@ -15,7 +15,7 @@
 # - CVE-2021-45115 (Denial of Service via UserAttributeSimilarityValidator)
 # - CVE-2021-45116 (Information disclosure via dictsort filter)
 # - CVE-2021-45452 (Directory traversal via Storage.save())
-Django==3.0.0
+Django==5.2.9
 
 # Django REST Framework
 djangorestframework==3.14.0