Palletsprojects Jinja vulnerabilities

• pallets jinja, debian linux +1 more Jinja sandbox breakout through attr filter selecting format method CVE-2025-27516 Fix available 5.4 MediumMarch 5, 2025
• pallets jinja Jinja has a sandbox breakout through indirect reference to format method CVE-2024-56326 Fix available 5.4 MediumDecember 23, 2024
• pallets jinja Jinja has a sandbox breakout through malicious filenames CVE-2024-56201 Fix available 5.4 MediumDecember 23, 2024
• pallets jinja, fedoraproject fedora +1 more Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter CVE-2024-34064 Public exploitFix available 5.4 MediumMay 6, 2024
• pallets jinja Jinja vulnerable to Cross-Site Scripting (XSS) CVE-2024-22195 Fix available 5.4 MediumJanuary 11, 2024
• palletsprojects jinja, fedoraproject fedora +1 more Regular Expression Denial of Service (ReDoS) CVE-2020-28493 Fix available 5.3 MediumFebruary 1, 2021
• palletsprojects jinja Jinja2 sandbox escape vulnerability CVE-2016-10745 Fix available 8.6 HighApril 8, 2019
• palletsprojects jinja, canonical ubuntu linux, fedoraproject fedora +2 more +4 more Jinja2 sandbox escape via string formatting CVE-2019-10906 Fix available 8.6 HighApril 6, 2019