Skip to content
OpenAdvisories

Package · Debian

jinja2

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2024-34064 Public exploit

    Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

    Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `>`, or `=`, as each would then be interpreted as starting a separat…

    pallets jinja jinja2 jinja2 Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2019-8341 Public exploit EPSS 44%

    An issue was discovered in Jinja2 2.10. The from_string function is prone to Server Side Template Injection (SSTI) wher…

    jinja2 jinja2 Debian Ubuntu