https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 23:48:35 +0000 https://vulnerability.circl.lu/vuln/cve-2019-8341 <p>An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the &#34;source&#34; parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn&#39;t valid because users shouldn&#39;t use untrusted templates without sandboxing</p> <p>An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the &#34;source&#34; parameter as a template object, renders it, and then returns it. The attacker can exploit it with {{INJECTION COMMANDS}} in a URI. NOTE: The maintainer and multiple third parties believe that this vulnerability isn&#39;t valid because users shouldn&#39;t use untrusted templates without sandboxing</p> https://vulnerability.circl.lu/vuln/cve-2019-8341