Medium ELSA-2024-2348 1 CVE

Moderate: python-jinja2 security update (Oracle Linux 9)

Published May 2, 2024 · Updated May 2, 2024

Ecosystem: Oracle Linux

Summary

[2.11.3-5]
- Security fix for CVE-2024-22195
Resolves: RHEL-21349

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 9	python3-jinja2	0:2.11.3-5.el9

Vulnerabilities 1

Medium 5.4

CVE-2024-22195

Jinja vulnerable to Cross-Site Scripting (XSS)

Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …

pallets jinja nodejs kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI

Jan 11, 2024