https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 22:37:47 +0000 https://cve.radiocsirt.org/vuln/cve-2016-10745 <p>In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.</p> <p>In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.</p> https://cve.radiocsirt.org/vuln/cve-2016-10745 https://cve.radiocsirt.org/vuln/usn-4011-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: jinja2, Ubuntu:18.04:LTS: jinja2</p> <p>Olivier Dony discovered that Jinja incorrectly handled str.format. An attacker could possibly use this issue to escape the sandbox. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10745)</p> <p>Brian Welch discovered that Jinja incorrectly handled str.format_map. An attacker could possibly use this issue to escape the sandbox. (CVE-2019-10906)</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: jinja2, Ubuntu:18.04:LTS: jinja2</p> <p>Olivier Dony discovered that Jinja incorrectly handled str.format. An attacker could possibly use this issue to escape the sandbox. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10745)</p> <p>Brian Welch discovered that Jinja incorrectly handled str.format_map. An attacker could possibly use this issue to escape the sandbox. (CVE-2019-10906)</p> https://cve.radiocsirt.org/vuln/usn-4011-1