CVE-2024-32651: Python Jinja2 Unsandboxed Environment Rendercve-2024-32651-python-jinja2-unsandboxed-environment-render
Use of jinja2.Environment (non-sandboxed) to render a template via `.from_string(...).render()` allows Server-Side Template Injection (SSTI) leading to Remote Code Execution when the template string is user-controlled. Jinja2 expressions in a non-sandboxed Environment can traverse Python attributes (e.g. `__init__.__globals__.__builtins__`) and import arbitr
