Red Hat Security Advisory

RHSA-2019:1152

python-jinja2 security update

Released 2019-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) python-jinja2-2.10.1-2.el8_0, python3-jinja2-2.10.1-2.el8_0

TI-2019-08127 CVE-2019-10906 · GHSA-462w-v97r-4m45

MEDIUM 44

In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.03603 Published 2019-04-06 Fixed in 2.10.1 CWE-693