com.hubspot.jinjava:jinjava vulnerabilities (Maven)

4 vulnerabilities.

• com.hubspot.jinjava:jinjava Maven JinJava Bypass through ForTag leads to Arbitrary Java Execution CVE-2026-25526 Public exploitFix available 9.8 CriticalFebruary 3, 2026
• com.hubspot.jinjava:jinjava Maven jinjava Sandbox Bypass via JavaType-Based Deserialization CVE-2025-59340 Fix available 9.8 CriticalSeptember 17, 2025
• com.hubspot.jinjava:jinjava Maven Unauthorized access to Class instance in Jinjava CVE-2020-12668 Fix available 6.5 MediumFebruary 19, 2021
• com.hubspot.jinjava:jinjava Maven Jinjava calls getClass CVE-2018-18893 Public exploitFix available 5.3 MediumJanuary 3, 2019