[{"CVE":"CVE-2019-10906","severity":"important","public_date":"2019-04-06T00:00:00Z","advisories":["RHSA-2019:1237","RHSA-2019:1329","RHSA-2019:1152","RHSA-2019:3172"],"bugzilla":"1698839","bugzilla_description":"CVE-2019-10906 python-jinja2: str.format_map allows sandbox escape","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","rh-python36-python-jinja2-0:2.9.6-3.el6","rh-python36-python-jinja2-0:2.9.6-3.el7","rh-python35-python-jinja2-0:2.8.1-2.el7","python-jinja2-0:2.10.1-2.el8_0","rh-python35-python-jinja2-0:2.8.1-2.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10906.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2019-8341","severity":null,"public_date":"2019-02-14T00:00:00Z","advisories":[],"bugzilla":"1677653","bugzilla_description":"CVE-2019-8341 python-jinja2: command injection in function from_string","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-77","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-8341.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","cvss3_score":"8.2"},{"CVE":"CVE-2016-10745","severity":"important","public_date":"2016-12-29T00:00:00Z","advisories":["RHSA-2019:1022","RHSA-2019:3964","RHSA-2019:1237","RHSA-2019:4062","RHSA-2019:1260","RHSA-2019:3172"],"bugzilla":"1698345","bugzilla_description":"CVE-2016-10745 python-jinja2: Sandbox escape due to information disclosure via str.format","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-138","affected_packages":["python-jinja2-0:2.10-10.el7sat","python27-python-jinja2-0:2.6-15.el7","python-jinja2-0:2.7.2-3.el7_4","python-jinja2-0:2.7.2-3.el7_5","python-jinja2-0:2.7.2-3.el7_6","rh-python35-python-jinja2-0:2.8.1-2.el7","rh-python35-python-jinja2-0:2.8.1-2.el6","python27-python-jinja2-0:2.6-12.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10745.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"9.0"},{"CVE":"CVE-2014-0012","severity":"moderate","public_date":"2014-01-11T00:00:00Z","advisories":[],"bugzilla":"1052102","bugzilla_description":"CVE-2014-0012 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use, incorrect CVE-2014-1402 fix","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0012.json"},{"CVE":"CVE-2014-1402","severity":"moderate","public_date":"2014-01-09T00:00:00Z","advisories":["RHSA-2014:0748","RHSA-2014:0747"],"bugzilla":"1051421","bugzilla_description":"CVE-2014-1402 python-jinja2: FileSystemBytecodeCache insecure cache temporary file use","cvss_score":4.4,"cvss_scoring_vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","CWE":"CWE-377","affected_packages":["python27-python-jinja2-0:2.6-10.el6","python33-python-jinja2-0:2.6-12.el7","python-jinja2-0:2.2.1-2.el6_5","python33-python-jinja2-0:2.6-11.el6","python27-python-jinja2-0:2.6-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1402.json"}]