All products

Red Hat Enterprise Linux 6/python-jinja2

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Jinja has a sandbox breakout through malicious filenamesCVE-2024-56201 · GHSA-GMJ6-6F8F-6699Version ranges need review. jinja2OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported
Jinja has a sandbox breakout through indirect reference to format methodCVE-2024-56326 · GHSA-Q2X7-8RV6-6Q7HVersion ranges need review. jinja2OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterCVE-2024-34064 · GHSA-H75V-3VVJ-5MFJVersion ranges need review. jinja2Red Hat Ansible Automation Platform 1.2/ansible-tower PyPIRed Hat Medium Fix reported
Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filterCVE-2024-22195 · GHSA-H5C8-RQWP-CP95Version ranges need review. jinja2Red Hat Ansible Automation Platform 1.2/ansible-tower PyPIRed Hat Medium Fix reported
Jinja2 vulnerable to sandbox breakout through attr filter selecting format methodCVE-2025-27516 · GHSA-CPWX-VRP4-4PQ7Version ranges need review. jinja2OpenShift Serverless/openshift-serverless-1/kn-eventing-istio-controller-rhel8 PyPIRed Hat Medium Fix reported
Jinja2 sandbox escape vulnerabilityCVE-2016-10745 · GHSA-HJ2J-77XM-MC5VVersion ranges need review. jinja2Red Hat Ceph Storage 2/python-jinja2 PyPIRed Hat High Fix reported
Regular Expression Denial of Service (ReDoS) in Jinja2CVE-2020-28493 · GHSA-G3RQ-G295-4J3MVersion ranges need review. jinja2Red Hat Ceph Storage 2/python-jinja2 PyPIRed Hat Medium Fix reported