Skip to content
OpenAdvisories
High ELSA-2025-7476 1 CVE

Important: python-jinja2 security update (Oracle Linux 10)

Published Jun 27, 2025 · Updated Jun 27, 2025

Ecosystem: Oracle Linux

Summary

[3.1.6-1]
- Update to 3.1.6
- Security fix for CVE-2025-27516
Resolves: RHEL-85058

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 python3-jinja2 0:3.1.6-1.el10_0
Oracle Linux · 10 python3-jinja2+i18n 0:3.1.6-1.el10_0

Vulnerabilities 1

  • Medium 5.4
    CVE-2025-27516

    Jinja sandbox breakout through attr filter selecting format method

    Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerabi…

    pallets jinja nodejs jupyter-base-notebook Debian Ubuntu Azure Linux Alpine Wolfi PyPI