Jinja 3.1.4 security release

{
  "id": "aa94c8d6902fb5784f55db5f43ac1690d9058d5d325084f55b9e4d134635b3c2",
  "url": "https://github.com/pallets/jinja/releases/tag/3.1.4",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "Jinja 3.1.4 security release",
    "summary": "Jinja 3.1.4 restricts keys accepted by the xmlattr filter, disallowing solidus, greater-than, and equals characters in addition to spaces. User input should not be used as filter keys unless separately validated.",
    "evidence": "This is the Jinja 3.1.4 security release, which fixes security issues and bugs",
    "products": [
      {
        "name": {
          "value": "Jinja",
          "evidence": "This is the Jinja 3.1.4 security release"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.1.4",
            "evidence": "This is the Jinja 3.1.4 security release"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-pallets-jinja",
  "document_id": 22116,
  "published_at": "2024-05-05T23:42:16+00:00"
}