Check logs Innovation sprint 17 week 2

[rfultz]

Log review needs to be completed per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

Ref: Check logs Sprint 17.6 week 1

[cnlucas]

FEC-CMS:
package.json: None

requirements.txt: 2 High, 2 Medium, 2 Low
[Snyk:High]: django SQL Injection will solve in fecgov/fec-cms#5161
[Snyk:High]: django SQL Injection will solve in fecgov/fec-cms#5161

[Snyk:Medium]: django Denial of Service (DoS) will solve in fecgov/fec-cms#5161
[Snyk:Medium]: [gitpython Regular Expression Denial of Service (ReDoS)] will solve in fecgov/fec-cms#5081

[Snyk:Low]: [django Directory Traversal]will solve in fecgov/fec-cms#5161
[Snyk:Low]: [django Information Exposure]will solve in fecgov/fec-cms#5161

OPEN-FEC:
package.json: 1 High, 1 Low
[SNYK: High]: [async- Prototype Pollution] -no remediation path yet
[SNYK: Low]: [minimist- Prototype Pollution] #5098

requirements.txt: 2 Medium
[Snyk: Medium]: [Celery Stored Command Injection] (#5017)

flyway: 0

FEC-EREGS:
package.json: 0
requirements.txt: 2 High
[Snyk:High]: django SQL Injection will solve in fecgov/fec-eregs#681
[Snyk:High]: django SQL Injection will solve in fecgov/fec-eregs#681

FEC-PATTERN-LIBRARY:
package.json: 1 High
[Snyk: High]: [moment Directory Traversal] (fecgov/fec-pattern-library#188)

Search logs:
No new users

Cloud.gov Dashboard:
9 deployer accounts--no change

Off-boarding:
None for this week