Skip to content
OpenAdvisories
High ELSA-2025-3406 1 CVE

Important: python-jinja2 security update (Oracle Linux 9)

Published Mar 31, 2025 · Updated Mar 31, 2025

Ecosystem: Oracle Linux

Summary

[2.11.3-8]
- Security fix for CVE-2025-27516
Resolves: RHEL-85064

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 python3-jinja2 0:2.11.3-8.el9_5

Vulnerabilities 1

  • Medium 5.4
    CVE-2025-27516

    Jinja sandbox breakout through attr filter selecting format method

    Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerabi…

    pallets jinja nodejs jupyter-base-notebook Debian Ubuntu Azure Linux Alpine Wolfi PyPI