CVE-2016-10745

Published April 8th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

A very fast and expressive template engine.

GitHub

11.7K