{"action":"Upgrade jinja2 to 2.8.1 or later.","affected":[{"fixed":"2.8.1","introduced":"0"}],"component":"jinja2","cve_ids":["CVE-2016-10745"],"ecosystem":"PyPI","epss":0.0352,"exploited":false,"fixed_versions":["2.8.1"],"ghsa_id":"GHSA-hj2j-77xm-mc5v","id":"tcs_01M5KG9290E9T91M1343MADYXW","modified_at":"2023-11-08T03:58:21.453618Z","published_at":"2019-04-08T13:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-220","https://palletsprojects.com/blog/jinja-281-released/","https://github.com/pallets/jinja/commit/9b53045c34e61013dc8f09b7e52a555fa16bed16","https://access.redhat.com/errata/RHSA-2019:1022","http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00030.html","https://access.redhat.com/errata/RHSA-2019:1237","https://access.redhat.com/errata/RHSA-2019:1260","https://usn.ubuntu.com/4011-1/","https://usn.ubuntu.com/4011-2/","http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00064.html","https://access.redhat.com/errata/RHSA-2019:3964","https://access.redhat.com/errata/RHSA-2019:4062","https://github.com/advisories/GHSA-hj2j-77xm-mc5v"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-220","url":"https://osv.dev/vulnerability/PYSEC-2019-220"}],"summary":"In Pallets Jinja before 2.8.1, str.format allows a sandbox escape."}