python-Jinja2/jinja2-3.1.4.tar.gz
Dirk Mueller 3e785a3c5f - update to 3.1.4 (bsc#1223980, CVE-2024-34064):
* The xmlattr filter does not allow keys with / solidus, >
    greater-than sign, or = equals sign, in addition to disallowing
    spaces. Regardless of any validation done by Jinja, user input
    should never be used as keys to this filter, or must be separately
    validated first.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Jinja2?expand=0&rev=110
2024-05-06 18:11:54 +00:00

235 KiB (Stored with Git LFS)