Skip to content
OpenAdvisories

Product · HubSpot

jinjava

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-25526 Public exploit

    JinJava Bypass through ForTag leads to Arbitrary Java Execution

    JinJava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Prior to versions 2.7.6 and 2.8.3, JinJava is vulnerable to arbitrary Java execution via bypass through ForTag. This allows arbitrary Java class instan…

    HubSpot jinjava com.hubspot.jinjava:jinjava Maven