# vuln-py-repo Fixture: pins jinja2==2.11.2 (planted, known-vulnerable per the offline advisory fixture).