2 matches found
CVE-2019-10906
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
CVE-2016-10745
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.