CVE-2019-10906

8.6

HIGHCVSS v3

Published

April 7, 2019

CVSS v2

5 MEDIUM

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.

GitHubA very fast and expressive template engine.

< 2.10.1NVD

Docker HubOfficial openSUSE Leap Images

= 42.3, = 15.0NVD

Docker Hub

Official Docker builds of Fedora

= 28, = 29, = 30NVD

NPMDigital Repository Ireland - fedora backend operations

= 28, = 29, = 30NVD

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 28, = 29, = 30NVD