Skip to content
OpenAdvisories
Medium USN-5701-1 1 CVE

jinja2 vulnerability

Published Oct 26, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Yeting Li discovered that Jinja2 incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS jinja2 2.8-1ubuntu0.1+esm1

Vulnerabilities 1

  • Medium 5.3
    CVE-2020-28493

    Regular Expression Denial of Service (ReDoS)

    This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. T…

    nodejs nodejs24 jinja2 jinja2 Debian Ubuntu Azure Linux Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2020-28493