Pocoo Jinja2

3 CVEs affecting Pocoo Jinja2. Latest disclosed: 2019-02-15. Critical: 1, High: 0.

Top CVEs affecting Pocoo Jinja2
CVESeverityScorePublishedSummary
CVE-2019-8341Critical9.82019-02-15An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) where it takes the "source" parameter as a t…
CVE-2014-14022014-05-19The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain…
CVE-2014-00122014-05-19FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary…