| Jinja has a sandbox breakout through malicious filenamesCVE-2024-56201 · GHSA-GMJ6-6F8F-6699Version ranges need review. |
jinja2OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Jinja has a sandbox breakout through indirect reference to format methodCVE-2024-56326 · GHSA-Q2X7-8RV6-6Q7HVersion ranges need review. |
jinja2OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterCVE-2024-34064 · GHSA-H75V-3VVJ-5MFJVersion ranges need review. |
jinja2Red Hat Ansible Automation Platform 1.2/ansible-tower |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterCVE-2024-22195 · GHSA-H5C8-RQWP-CP95Version ranges need review. |
jinja2Red Hat Ansible Automation Platform 1.2/ansible-tower |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Jinja2 vulnerable to sandbox breakout through attr filter selecting format methodCVE-2025-27516 · GHSA-CPWX-VRP4-4PQ7Version ranges need review. |
jinja2OpenShift Serverless/openshift-serverless-1/kn-eventing-istio-controller-rhel8 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Insecure Temporary File in Jinja2CVE-2014-0012 · GHSA-FQH9-2QGG-H84HVersion ranges need review. |
jinja2 |
PyPI |
Medium
|
Fix reported |
|
| Jinja2 sandbox escape vulnerabilityCVE-2016-10745 · GHSA-HJ2J-77XM-MC5VVersion ranges need review. |
jinja2Red Hat Ceph Storage 2/python-jinja2 |
PyPIRed Hat |
High
|
Fix reported |
|
| Jinja2 sandbox escape via string formattingCVE-2019-10906 · GHSA-462W-V97R-4M45Version ranges need review. |
jinja2 |
PyPI |
High
|
Fix reported |
|
| Regular Expression Denial of Service (ReDoS) in Jinja2CVE-2020-28493 · GHSA-G3RQ-G295-4J3MVersion ranges need review. |
jinja2Red Hat Ceph Storage 2/python-jinja2 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Incorrect Privilege Assignment in Jinja2CVE-2014-1402 · GHSA-8R7Q-CVJQ-X353Version ranges need review. |
jinja2Red Hat OpenStack Platform 4/python-jinja2-26 |
PyPIRed Hat |
High
|
Fix reported |
|
