https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:22:34 +0000 https://vulnerability.circl.lu/vuln/cve-2019-10906 <p>In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.</p> <p>In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.</p> https://vulnerability.circl.lu/vuln/cve-2019-10906 https://vulnerability.circl.lu/vuln/ghsa-462w-v97r-4m45 <p><strong>Affected:</strong> PyPI: Jinja2</p> <p>In Pallets Jinja before 2.10.1, `str.format_map` allows a sandbox escape.</p> <p>The sandbox is used to restrict what code can be evaluated when rendering untrusted, user-provided templates. Due to the way string formatting works in Python, the `str.format_map` method could be used to escape the sandbox.</p> <p>This issue was previously addressed for the `str.format` method in Jinja 2.8.1, which discusses the issue in detail. However, the less-common `str.format_map` method was overlooked. This release applies the same sandboxing to both methods.</p> <p>If you cannot upgrade Jinja, you can override the `is_safe_attribute` method on the sandbox and explicitly disallow the `format_map` method on string objects.</p> <p><strong>Affected:</strong> PyPI: Jinja2</p> <p>In Pallets Jinja before 2.10.1, `str.format_map` allows a sandbox escape.</p> <p>The sandbox is used to restrict what code can be evaluated when rendering untrusted, user-provided templates. Due to the way string formatting works in Python, the `str.format_map` method could be used to escape the sandbox.</p> <p>This issue was previously addressed for the `str.format` method in Jinja 2.8.1, which discusses the issue in detail. However, the less-common `str.format_map` method was overlooked. This release applies the same sandboxing to both methods.</p> <p>If you cannot upgrade Jinja, you can override the `is_safe_attribute` method on the sandbox and explicitly disallow the `format_map` method on string objects.</p> https://vulnerability.circl.lu/vuln/ghsa-462w-v97r-4m45 https://vulnerability.circl.lu/vuln/pysec-2019-217 <p><strong>Affected:</strong> PyPI: jinja2</p> <p>In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.</p> <p><strong>Affected:</strong> PyPI: jinja2</p> <p>In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.</p> https://vulnerability.circl.lu/vuln/pysec-2019-217