cve 2019 10906

CVE-2019-10906 is a high-severity sandbox escape vulnerability in the Jinja2 templating engine, patched in version 2.10.1. Microsoft's advisory lists Azure Linux as an affected product, but the vulnerability may also impact other Microsoft artifacts that ship Jinja, such as container images, SDKs, or tools. Organizations using Microsoft-provided Linux images or Python-based artifacts should evaluate their exposure and apply updates. Discussions on WindowsForum highlight the broad distribution of Jinja across Linux distributions and Microsoft ecosystems, emphasizing the need for thorough patching beyond the listed affected products.