2 finding(s), highest priority first:
+- Jinja2 2.10  |  GHSA-462w-v97r-4m45  |  priority 91.9 (critical) -------------------------------+
| +- A - Attack summary -------------------------------------------------------------------------+ |
| | Jinja2 2.10 is affected by GHSA-462w-v97r-4m45 (CVE-2019-10906).                             | |
| | Jinja2 sandbox escape via str.format_map.                                                    | |
| +----------------------------------------------------------------------------------------------+ |
| +- B - Risk -----------------------------------------------------------------------------------+ |
| | Badge: RED                                                                                   | |
| | KEV-listed (known exploited in the wild); EPSS 0.945; CVSS 8.8                               | |
| +----------------------------------------------------------------------------------------------+ |
| +- C - Action ---------------------------------------------------------------------------------+ |
| | Verdict: Fix now  (priority 91.9, critical)                                                  | |
| | Fix: pip install --upgrade "Jinja2>=2.10.1"                                                  | |
| | Minimal safe upgrade: 2.10.1.                                                                | |
| | Reachability: not analyzed                                                                   | |
| +----------------------------------------------------------------------------------------------+ |
+--------------------------------------------------------------------------------------------------+
+- Flask 0.12  |  GHSA-flask-dos0  |  priority 22.4 (low) -----------------------------------------+
| +- A - Attack summary -------------------------------------------------------------------------+ |
| | Flask 0.12 is affected by GHSA-flask-dos0 (CVE-2018-1000656).                                | |
| | Flask denial of service via crafted JSON.                                                    | |
| +----------------------------------------------------------------------------------------------+ |
| +- B - Risk -----------------------------------------------------------------------------------+ |
| | Badge: GREEN                                                                                 | |
| | EPSS 0.020; CVSS 5.3                                                                         | |
| +----------------------------------------------------------------------------------------------+ |
| +- C - Action ---------------------------------------------------------------------------------+ |
| | Verdict: Monitor  (priority 22.4, low)                                                       | |
| | Fix: pip install --upgrade "Flask>=0.12.3"                                                   | |
| | Minimal safe upgrade: 0.12.3.                                                                | |
| | Reachability: not analyzed                                                                   | |
| +----------------------------------------------------------------------------------------------+ |
+--------------------------------------------------------------------------------------------------+
