Skip to content
OpenAdvisories
High ELSA-2025-3388 1 CVE

Important: python-jinja2 security update (Oracle Linux 8)

Published Mar 31, 2025 · Updated Mar 31, 2025

Ecosystem: Oracle Linux

Summary

[2.10.1-7]
- Security fix for CVE-2025-27516
Resolves: RHEL-85066

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 python3-jinja2 0:2.10.1-7.el8_10

Vulnerabilities 1

  • Medium 5.4
    CVE-2025-27516

    Jinja sandbox breakout through attr filter selecting format method

    Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerabi…

    pallets jinja nodejs jupyter-base-notebook Debian Ubuntu Azure Linux Alpine Wolfi PyPI