Known security vulnerabilities detected

[icorgadmin]

Known security vulnerabilities detected

Dependency pycrypto Version <= 2.6.1
Defined in requirements.txt
Vulnerabilities
CVE-2018-6594 Moderate severity
CVE-2013-7459 Moderate severity

Dependency Pillow Version < 3.1.1 Upgrade to ~> 3.1.1
Defined in requirements.txt
Vulnerabilities
CVE-2016-4009 High severity
CVE-2016-0740 Moderate severity
CVE-2016-9189 Moderate severity
CVE-2016-2533 Moderate severity
CVE-2016-0775 Moderate severity
View 2 more [https://github.com/ImperialCollegeLondon/citizengrid/network/alert/dashboard/requirements.txt/Pillow/open]

Dependency org.apache.httpcomponents:httpclient Version < 4.3.6 Upgrade to ~> 4.3.6
Defined in pom.xml
Vulnerabilities
CVE-2015-5262 Moderate severity

Dependency djangorestframework Version < 3.9.1 Upgrade to ~> 3.9.1
Defined in requirements.txt
Vulnerabilities
WS-2019-0037 Moderate severity

Dependency pillow Version < 6.2.0 Upgrade to ~> 6.2.0
Defined in requirements.txt
Vulnerabilities
CVE-2019-16865 Low severity

Review all vulnerable dependencies [https://github.com/ImperialCollegeLondon/citizengrid/network/alerts]