jinja2 vulnerabilities (Debian)

13 vulnerabilities.

• jinja2 Debian jinja2 - regression update DLA-4126-2 Fix available No scoreApril 30, 2025
• jinja2 Debian Jinja sandbox breakout through attr filter selecting format method CVE-2025-27516 Fix available 5.4 MediumMarch 5, 2025
• jinja2 Debian Jinja has a sandbox breakout through indirect reference to format method CVE-2024-56326 Fix available 5.4 MediumDecember 23, 2024
• jinja2 Debian Jinja has a sandbox breakout through malicious filenames CVE-2024-56201 Fix available 5.4 MediumDecember 23, 2024
• jinja2 Debian jinja2 - regression update DLA-3988-2 Fix available No scoreDecember 9, 2024
• jinja2 Debian Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter CVE-2024-34064 Public exploitFix available 5.4 MediumMay 6, 2024
• jinja2 Debian Jinja vulnerable to Cross-Site Scripting (XSS) CVE-2024-22195 Fix available 5.4 MediumJanuary 11, 2024
• jinja2 Debian Regular Expression Denial of Service (ReDoS) CVE-2020-28493 Fix available 5.3 MediumFebruary 1, 2021
• jinja2 Debian Jinja2 sandbox escape vulnerability CVE-2016-10745 Fix available 8.6 HighApril 8, 2019
• jinja2 Debian Jinja2 sandbox escape via string formatting CVE-2019-10906 Fix available 8.6 HighApril 6, 2019
• jinja2 Debian ** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to... CVE-2019-8341 Public exploitDisputed EPSS 43.9% 9.8 CriticalFebruary 15, 2019
• jinja2 Debian Insecure Temporary File in Jinja2 CVE-2014-0012 Fix available 4.4 MediumMay 19, 2014
• jinja2 Debian Incorrect Privilege Assignment in Jinja2 CVE-2014-1402 Fix available 4.4 MediumJanuary 24, 2014