| Package | Affected versions | Patched versions |
|---|---|---|
| jinja2 | < 2.8.1 | 2.8.1 |
| jinja | < 2.8.1 | 2.8.1 |
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free