CVEs published April 6, 2019
3 CVEs were published on April 6, 2019: 0 critical, 0 high.
- Published
- 3
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 3
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- erusev/parsedown
- 1
- jinja2
- 1
- roundup
- 1
Medium, low and unrated 3
- CVE-2019-10906In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.jinja2
- CVE-2019-10905Parsedown before 1.7.2, when safe mode is used and HTML markup is disabled, might allow attackers to execute arbitrary JavaScript code if a erusev/parsedown
- CVE-2019-10904Roundup 1.6 allows XSS via the URI because frontends/roundup.cgi and roundup/cgi/wsgi_handler.py mishandle 404 errors.roundup