Skip to content
OpenAdvisories

Package · Debian

jinja2

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2016-10745

    Jinja2 sandbox escape vulnerability

    In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.

    jinja2 jinja2 jinja2 Debian Ubuntu PyPI
  • High 8.6
    CVE-2019-10906

    Jinja2 sandbox escape via string formatting

    In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.

    jinja2 jinja2 jinja2 Debian Ubuntu PyPI
  • High 8.4
    CVE-2014-1402

    Incorrect Privilege Assignment in Jinja2

    The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file with a name starting with __jinja2_ in /tmp.

    jinja2 jinja2 Debian PyPI