CVE-2019-10906

Published: Apr 6, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://palletsprojects.com/blog/jinja-2-10-1-released

x_refsource_MISC

[infra-devnull] 20190410 [GitHub] [airflow] XD-DENG opened pull request #5075: [AIRFLOW-XXX] Change allowed version of Jinja2 to fix CVE-2019-10906

mailing-list

x_refsource_MLIST

[airflow-commits] 20190410 [GitHub] [airflow] XD-DENG opened a new pull request #5075: [AIRFLOW-XXX] Change allowed version of Jinja2 to fix CVE-2019-10906

mailing-list

x_refsource_MLIST

[airflow-commits] 20190410 [GitHub] [airflow] XD-DENG commented on issue #5075: [AIRFLOW-XXX] Change allowed version of Jinja2 to fix CVE-2019-10906

mailing-list

x_refsource_MLIST

[airflow-commits] 20190410 [GitHub] [airflow] ashb commented on issue #5075: [AIRFLOW-XXX] Change allowed version of Jinja2 to fix CVE-2019-10906

mailing-list

x_refsource_MLIST

[infra-devnull] 20190410 [GitHub] [airflow] XD-DENG commented on issue #5075: [AIRFLOW-XXX] Change allowed version of Jinja2 to fix CVE-2019-10906

mailing-list

x_refsource_MLIST

[infra-devnull] 20190410 [GitHub] [airflow] ashb commented on issue #5075: [AIRFLOW-XXX] Change allowed version of Jinja2 to fix CVE-2019-10906

mailing-list

x_refsource_MLIST

[airflow-commits] 20190410 [GitHub] [airflow] ashb merged pull request #5075: [AIRFLOW-XXX] Change allowed version of Jinja2 to fix CVE-2019-10906

mailing-list

x_refsource_MLIST

[infra-devnull] 20190410 [GitHub] [airflow] ashb closed pull request #5075: [AIRFLOW-XXX] Change allowed version of Jinja2 to fix CVE-2019-10906

mailing-list

x_refsource_MLIST

FEDORA-2019-4f978cacb4

vendor-advisory

x_refsource_FEDORA

FEDORA-2019-e41e19457b

vendor-advisory

x_refsource_FEDORA

FEDORA-2019-04a42e480b

vendor-advisory

x_refsource_FEDORA

RHSA-2019:1152

vendor-advisory

x_refsource_REDHAT

openSUSE-SU-2019:1395

vendor-advisory

x_refsource_SUSE

RHSA-2019:1237

vendor-advisory

x_refsource_REDHAT

RHSA-2019:1329

vendor-advisory

x_refsource_REDHAT

USN-4011-1

vendor-advisory

x_refsource_UBUNTU

USN-4011-2

vendor-advisory

x_refsource_UBUNTU

openSUSE-SU-2019:1614

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2019-10906

Description

Affected Products

References