python-Jinja2 vulnerabilities (SUSE)
14 vulnerabilities.
-
python-Jinja2SUSE Jinja sandbox breakout through attr filter selecting format method 5.4 Medium -
python-Jinja2SUSE Jinja has a sandbox breakout through indirect reference to format method 5.4 Medium -
python-Jinja2SUSE Jinja has a sandbox breakout through malicious filenames 5.4 Medium -
python-Jinja2SUSE Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter 5.4 Medium -
python-Jinja2SUSE Jinja vulnerable to Cross-Site Scripting (XSS) 5.4 Medium -
python-Jinja2SUSE Regular Expression Denial of Service (ReDoS) 5.3 Medium -
python-Jinja2SUSE Improper Authentication in InfluxDB 9.8 Critical -
python-Jinja2SUSE Grafana XSS via a query alias for the ElasticSearch datasource 6.1 Medium -
python-Jinja2SUSE CRLF injection in urllib3 6.5 Medium -
python-Jinja2SUSE Improper Verification of Cryptographic Signature in PySAML2 7.5 High -
python-Jinja2SUSE Jinja2 sandbox escape vulnerability 8.6 High -
python-Jinja2SUSE Jinja2 sandbox escape via string formatting 8.6 High -
python-Jinja2SUSE ** DISPUTED ** An issue was discovered in Jinja2 2.10. The from_string function is prone to... 9.8 Critical -
python-Jinja2SUSE Insecure Temporary File in Jinja2 4.4 Medium