2 results · Clear filters · Feed
-
High 8.6
Jinja2 sandbox escape vulnerability
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
-
High 8.6
Jinja2 sandbox escape via string formatting
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.