You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Bump jinja2 to 3.1.5 in llvm/docs/requirements-hashed.txt (#16717)
PR to bump dependency version to resolve security vulnerability found.
In current version, Jinja has a sandbox breakout through malicious
filenames - a bug in the Jinja compiler allows an attacker that controls
both the content and filename of a template to execute arbitrary Python
code, regardless of if Jinja's sandbox is used.
Additional details:
Weaknesses: CWE-150
CVE ID: CVE-2024-56201
0 commit comments