{"action":"Upgrade jinja2 to 2.8.1 or later.","affected":[{"fixed":"2.8.1","introduced":"0"}],"component":"jinja2","cve_ids":["CVE-2016-10745"],"ecosystem":"PyPI","epss":0.0352,"exploited":false,"fixed_versions":["2.8.1"],"ghsa_id":"GHSA-hj2j-77xm-mc5v","id":"tcs_01M5KFKTHM1K13SA63FM0FQBAS","modified_at":"2024-09-24T21:04:16.963502Z","published_at":"2019-04-10T14:30:13Z","references":["https://osv.dev/vulnerability/GHSA-hj2j-77xm-mc5v","https://nvd.nist.gov/vuln/detail/CVE-2016-10745","https://github.com/pallets/jinja/commit/9b53045c34e61013dc8f09b7e52a555fa16bed16","https://access.redhat.com/errata/RHSA-2019:1022","https://access.redhat.com/errata/RHSA-2019:1237","https://access.redhat.com/errata/RHSA-2019:1260","https://access.redhat.com/errata/RHSA-2019:3964","https://access.redhat.com/errata/RHSA-2019:4062","https://github.com/advisories/GHSA-hj2j-77xm-mc5v","https://github.com/pallets/jinja","https://github.com/pypa/advisory-database/tree/main/vulns/jinja2/PYSEC-2019-220.yaml","https://palletsprojects.com/blog/jinja-281-released","https://usn.ubuntu.com/4011-1","https://usn.ubuntu.com/4011-2","http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-hj2j-77xm-mc5v","url":"https://osv.dev/vulnerability/GHSA-hj2j-77xm-mc5v"}],"summary":"Jinja2 sandbox escape vulnerability"}