CVE-2020-28493

Advisory

Lazuli 2.2.3 updates its dependency 'jinja2' to v2.11.3 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- Update dependencies following vulnerability notices from GitHub Advisory Database
- PyYaml
- [CVE-2020-1747](https://github.com/advisories/GHSA-6757-jp84-gxfx)
- mkdocs
- [CVE-2021-40978](https://github.com/advisories/GHSA-qh9q-34h6-hcv9)
- jinja2
- [CVE-2020-28493](https://github.com/advisories/GHSA-g3rq-g295-4j3m)
- urllib3
- [CVE-2021-28363](https://github.com/advisories/GHSA-5phf-pp7p-vc2r)
- [CVE-2021-33503](https://github.com/advisories/GHSA-q2q7-5pp4-w6pg)
- Pygments
- [CVE-2021-20270](https://github.com/advisories/GHSA-9w8r-397f-prfh)
- [CVE-2021-27291](https://github.com/advisories/GHSA-pq64-v7f5-gqh8)
- nltk
- [CVE-2021-3828](https://github.com/advisories/GHSA-2ww3-fxvq-293j)
- [CVE-2021-3842](https://github.com/advisories/GHSA-rqjh-jp2r-59cj)
- [CVE-2021-43854](https://github.com/advisories/GHSA-f8m6-h2c7-8h9x)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28493