jelmerdejong/flask-app-blueprint

Upgrade Jinja2

Closed this issue · 0 comments

jelmerdejong commented

Upgrade Jinja2 to version 2.10.1 or later to fix CVE-2019-10906

In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.