2019-04-06 23:17:03
mitre
PUBLISHED
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.