PT-2019-12084

Name of the Vulnerable Software and Affected Versions Pallets Jinja versions prior to 2.10.1 Description The issue allows a sandbox escape through the str.format map method. This method could be used to bypass the sandbox, which is designed to restrict the evaluation of untrusted, user-provided...