Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-56326 EUVD-2024-3607GHSA-q2x7-8rv6-6q7hPYSEC-2026-1475

Jinja has a sandbox breakout through indirect reference to format method

Published Dec 23, 2024 · Updated Nov 3, 2025 · Assigned by GitHub_M

Vendor: pallets Product: jinja Package: airflow Package: checkov Package: dask-gateway Package: emissary Package: emissary-apiext Package: emissary-oci-entrypoint Package: jinja2 Package: jinja2 Package: jinja2 Package: kserve Package: kserve-agent Package: kserve-agent-compat Package: kserve-manager Package: kserve-manager-compat Package: kserve-qpext Package: kserve-qpext-compat Package: kserve-router Package: kserve-router-compat Package: kserve-storage-controller Package: kubeflow-jupyter-web-app Package: kubeflow-pipelines-visualization-server Package: kubeflow-volumes-web-app Package: py3-jinja2 Package: py3-jinja2 Package: py3.10-ambassador Package: py3.11-ambassador Package: py3.12-ambassador Package: py3.13-ambassador Package: python-jinja2 Package: reflex Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: PyPI Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates. Jinja's sandbox does catch calls to str.format and ensures they don't escape the sandbox. However, it's possible to store a reference to a malicious string's format method, then pass that to a filter that calls it. No such filters are built-in to Jinja, but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox. This vulnerability is fixed in 3.1.5.

Affected products

VendorProductAffectedFixed
pallets jinja < 3.1.5 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 jinja2 3.1.5-1 —
Debian 13 jinja2 3.1.5-1 —
Debian 12 jinja2 3.1.2-1+deb12u2 —
Debian 11 jinja2 2.11.3-1+deb11u3 DLA-4126-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS jinja2 3.1.2-1ubuntu1.2 USN-7343-1, USN-7244-1
Ubuntu 22.04 LTS jinja2 3.0.3-1ubuntu0.3 USN-7343-1, USN-7244-1
Ubuntu 20.04 LTS jinja2 2.10.1-2ubuntu0.4 USN-7343-1, USN-7244-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS jinja2 2.10-1ubuntu0.18.04.1+esm3 USN-7343-1, USN-7244-1
Ubuntu Pro 16.04 LTS jinja2 2.8-1ubuntu0.1+esm5 USN-7343-1
Ubuntu Pro 14.04 LTS jinja2 2.7.2-2ubuntu0.1~esm6 USN-7343-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 9 fence-virt +55 4.10.0-76.el9_5.4 RHSA-2025:0308
RHEL 9 python-jinja2 +1 2.11.3-7.el9_5 RHSA-2025:0667
RHEL 8 python-jinja2 +1 2.10.1-6.el8_10 RHSA-2025:0711
Show 23 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Satellite Utils 6 foreman +1 3.12.0.6-1.el8sat RHSA-2025:2399
Red Hat Satellite Utils 6 satellite +1 6.16.3-2.el8sat RHSA-2025:2399
Red Hat Satellite Maintenance 6 rubygem-foreman_maintain 1:1.7.12-1.el8sat RHSA-2025:2399
Red Hat Satellite Capsule 6 foreman +2 3.12.0.6-1.el8sat RHSA-2025:2399
Red Hat Satellite Capsule 6 foreman-installer +1 1:3.12.0.4-2.el8sat RHSA-2025:2399
Red Hat Satellite Capsule 6 python-django +1 4.2.19-1.el8pc RHSA-2025:4576, RHSA-2025:2399
Red Hat Satellite Capsule 6 python-jinja2 +1 3.1.5-1.el8pc RHSA-2025:4576, RHSA-2025:2399
Red Hat Satellite Capsule 6 python-pulp-cli +3 0.29.2-2.el8pc RHSA-2025:2399
Red Hat Satellite Capsule 6 python-pulp-container +1 2.20.5-1.el8pc RHSA-2025:2399
Red Hat Satellite Capsule 6 python-pulpcore +1 3.49.33-1.el8pc RHSA-2025:2399
Red Hat Satellite Capsule 6 python-requests +1 2.32.3-2.el8pc RHSA-2025:2399
Red Hat Satellite Capsule 6 rubygem-foreman_maintain 1:1.7.12-1.el8sat RHSA-2025:2399
Red Hat Satellite Capsule 6 rubygem-rack 2.2.13-1.el9sat RHSA-2025:4576
Red Hat Satellite Capsule 6 satellite +2 6.16.3-2.el8sat RHSA-2025:2399
Red Hat Satellite 6 candlepin +1 4.4.21-1.el8sat RHSA-2025:2399
Red Hat Satellite 6 foreman +14 3.12.0.6-1.el8sat RHSA-2025:2399
Red Hat Satellite 6 foreman-installer +1 1:3.12.0.4-2.el8sat RHSA-2025:2399
Red Hat Satellite 6 python-django +1 4.2.19-1.el8pc RHSA-2025:4576, RHSA-2025:2399
Red Hat Satellite 6 python-jinja2 +1 3.1.5-1.el8pc RHSA-2025:4576, RHSA-2025:2399
Red Hat Satellite 6 python-pulp-cli +3 0.29.2-2.el8pc RHSA-2025:2399
Red Hat Satellite 6 python-pulp-container +1 2.20.5-1.el8pc RHSA-2025:2399
Red Hat Satellite 6 python-pulpcore +1 3.49.33-1.el8pc RHSA-2025:2399
Red Hat Satellite 6 python-requests +1 2.32.3-2.el8pc RHSA-2025:2399
Red Hat Satellite 6 rubygem-foreman_ansible 14.2.3-1.el8sat RHSA-2025:2399
Red Hat Satellite 6 rubygem-foreman_maintain 1:1.7.12-1.el8sat RHSA-2025:2399
Red Hat Satellite 6 rubygem-foreman_openscap 9.0.5-1.el8sat RHSA-2025:2399
Red Hat Satellite 6 rubygem-foreman_remote_execution +1 13.2.7-1.el8sat RHSA-2025:2399
Red Hat Satellite 6 rubygem-foreman_theme_satellite 13.3.5-1.el8sat RHSA-2025:2399
Red Hat Satellite 6 rubygem-graphql 1.13.24-1.el9sat RHSA-2025:4576
Red Hat Satellite 6 rubygem-katello 4.14.0.8-1.el8sat RHSA-2025:2399
Red Hat Satellite 6 rubygem-rack 2.2.13-1.el9sat RHSA-2025:4576
Red Hat Satellite 6 satellite +2 6.16.3-2.el8sat RHSA-2025:2399
Red Hat Satellite 6 scap-security-guide-satellite 1.0.0-1.el8sat RHSA-2025:2399
RHEL 9.4 EUS fence-virt +55 4.10.0-62.el9_4.10 RHSA-2025:0338
RHEL 9.4 EUS python-jinja2 +1 2.11.3-6.el9_4 RHSA-2025:0850
RHEL 9.2 EUS fence-virt +55 4.10.0-43.el9_2.11 RHSA-2025:0335
RHEL 9.2 EUS python-jinja2 +1 2.11.3-4.el9_2.1 RHSA-2025:0978
RHEL 9.0 E4S fence-virt +56 4.10.0-20.el9_0.20 RHSA-2025:0345
RHEL 9.0 E4S python-jinja2 +1 2.11.3-4.el9_0.1 RHSA-2025:0951
RHEL 8.8 EUS python-jinja2 +1 2.10.1-4.el8_8.1 RHSA-2025:0883
RHEL 8.6 TUS python-jinja2 +1 2.10.1-4.el8_6.1 RHSA-2025:0950
RHEL 8.6 E4S python-jinja2 +1 2.10.1-4.el8_6.1 RHSA-2025:0950
RHEL 8.6 AUS python-jinja2 +1 2.10.1-4.el8_6.1 RHSA-2025:0950
RHEL 8.4 TUS python-jinja2 +1 2.10.1-2.el8_4.1 RHSA-2025:1109
RHEL 8.4 E4S python-jinja2 +1 2.10.1-2.el8_4.1 RHSA-2025:1109
RHEL 8.4 AUS python-jinja2 +1 2.10.1-2.el8_4.1 RHSA-2025:1109
RHEL 8.2 AUS python-jinja2 +1 2.10.1-2.el8_2.3 RHSA-2025:2612
RHEL 7 ELS python-jinja2 2.7.2-5.el7_9 RHSA-2025:1250
Red Hat Openshift Ironic 4 crudini 0.9.3-4.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 pyOpenSSL +1 20.0.1-2.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 pysnmp 4.4.12-6.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 pysnmp-lextudio 5.0.26-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-SecretStorage +1 2.3.1-9.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-amqp +2 5.0.6-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-automaton +1 3.2.0-0.20240522151206.9255778.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-autopage +1 0.4.0-1.el9.2 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-bcrypt +1 3.1.6-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-beautifulsoup4 +1 4.9.3-2.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-binary-memcached +1 0.31.1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-cachetools +1 3.1.0-4.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-cinderclient +1 9.4.0-0.20231214204912.f1f14df.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-click +1 7.1.2-5.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-cliff +2 4.7.0-0.20240708130156.b75afa0.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-cmd2 +1 1.4.0-2.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-colorama +1 0.4.1-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-construct +1 2.10.56-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-contextlib2 +1 0.6.0.post1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-ddt +3 1.6.0-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-debtcollector +1 3.0.0-0.20240522153257.0e6ce1c.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-decorator +1 4.4.2-6.0.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-defusedxml +1 0.7.1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-dogpile-cache +1 1.1.5-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-dracclient +1 8.0.0-0.20231214182834.9c7499c.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-editor +1 1.0.4-5.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-eventlet +1 0.33.1-6.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-fasteners +1 0.18-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-fixtures +1 4.0.1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-flask +2 2:2.0.1-4.el9.2 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-funcsigs +2 1.0.2-17.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-futurist +1 3.0.0-0.20240522153313.4e14db5.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-gevent +1 21.1.2-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-glanceclient +1 1:4.4.0-0.20231214201927.62e6fc8.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-greenlet +2 1.1.3-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-gunicorn +2 20.0.4-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-hardware +2 0.31.0-0.20231214192627.af076d3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-html5lib +1 1:1.1-4.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-ifaddr +1 0.1.6-6.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-importlib-metadata +1 4.12.0-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-ironic-prometheus-exporter +1 4.3.0-0.20231219134422.5211827.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-ironicclient +1 4.9.0-0.20211209154934.6f1be06.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-iso8601 +1 0.1.12-9.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-itsdangerous +1 2.0.1-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-jinja2 +1 3.0.1-6.el9.2 RHSA-2025:1130, RHSA-2025:1118, RHSA-2025:0842
Red Hat Openshift Ironic 4 python-jsonpath-rw +1 1.2.3-23.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-jsonschema +2 4.17.3-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-kazoo +1 2.7.0-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-keyring 21.0.0-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-keystoneauth1 5.8.0-0.20240926162816.cca6c92.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-keystoneclient 1:5.5.0-0.20240926163413.a635649.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-keystonemiddleware 10.7.1-0.20240926161612.4c001ba.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-kombu 1:5.0.2-1.el9.2 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-logutils 0.3.5-7.1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-markupsafe 2.1.1-4.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-memcached 1.58-12.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-microversion-parse +1 1.0.1-0.20240424173932.2c36df6.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-migrate 0.13.0-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-msgpack 0.6.2-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-munch 2.3.2-7.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-netaddr 0.10.1-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-neutronclient 7.6.0-0.20211012175718.983f0ab.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-openstacksdk 4.0.0-0.20240926164620.b65b7d4.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-os-client-config 2.1.0-0.20210722194729.bc96c23.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-os-service-types 1.7.0-0.20231218155726.0b2f473.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-os-traits 3.1.0-0.20240926162713.43e81cc.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-osc-lib 3.1.0-0.20240926155405.f9bcdec.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-cache +1 3.8.0-0.20240926160813.48dbe78.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-concurrency +1 6.1.0-0.20240926153040.248ba64.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-config 2:9.6.0-0.20240926164019.beb7b6c.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-context 5.6.0-0.20240926160501.7f3b6ac.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-db +1 16.0.0-0.20240926155855.a59dba4.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-i18n +1 6.4.0-0.20240926153652.efaff62.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-log +1 6.1.2-0.20240926163415.abd5c21.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-messaging 14.9.0-0.20240926165418.d601f7a.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-metrics 0.9.0-0.20240926153754.e7ea726.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-middleware +1 6.2.0-0.20240926161903.67a0a39.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-policy +1 4.5.0-0.20241211141936.cbb9d10.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-reports 2.3.0-0.20211012151507.f2799dc.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-rootwrap 7.3.0-0.20240926160108.c42ef39.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-serialization 5.5.0-0.20240926164818.f6e879d.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-service 3.5.0-0.20240708131154.a84a9de.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-upgradecheck 2.4.0-0.20240926154551.2e41b6d.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-utils +1 7.3.0-0.20241001125851.d37a161.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-oslo-versionedobjects +1 3.4.0-0.20240926154559.6af8327.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-osprofiler 4.2.0-0.20240926153040.3fb0487.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-paste 3.5.0-3.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-paste-deploy 2.0.1-5.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-pbr 6.0.0-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-pecan 1.3.2-10.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-pexpect 4.6-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-pint 0.10.1-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-platformdirs 2.3.0-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-proliantutils 2.16.3-0.20240926161103.fe2f9c2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-prometheus_client 0.7.1-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-pyasn1 +1 0.5.1-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-pycadf +1 3.1.1-0.20231214182229.4179996.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-pyperclip +1 1.8.0-3.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-redis 3.3.8-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-repoze-lru 0.7-7.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-requests-unixsocket 0.2.0-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-requestsexceptions 1.4.0-0.20231214180655.d7ac0ff.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-retrying 1.3.3-2.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-rfc3986 1.2.0-6.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-routes 2.4.1-12.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-scciclient 0.16.0-0.20240523142528.73b4e3d.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-setuptools 67.6.1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-simplegeneric 0.8.1-18.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-simplejson 3.17.0-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-singledispatch 3.4.0.3-19.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-smi 0.3.4-10.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-smi-lextudio 1.1.13-0.1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-soupsieve 2.1.0-2.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-sqlalchemy +1 1.4.39-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-sqlparse 0.2.4-10.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-statsd +1 3.2.1-20.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-stevedore 5.3.0-0.20240926155155.51134a4.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-sushy-oem-idrac 5.0.1-0.20240522171520.4e51aef.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-swiftclient 4.4.0-0.20231214204138.54fbfa8.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-tempita 0.5.1-25.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-tenacity 6.3.1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-tooz 6.3.0-0.20240926164120.734acc4.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-uhashring 2.1-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-vine 5.0.0-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-voluptuous 0.11.7-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-waitress 3.0.1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-warlock 1.3.3-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-wcwidth 0.2.5-2.el9.2 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-webencodings +1 0.5.1-15.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-webob 1.8.8-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-webtest 2.0.33-5.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-werkzeug 2.2.3-3.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-wrapt +1 1.14.1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-wsme 0.12.1-0.20231026141130.8312bb2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-yappi 1.3.1-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-zake 0.2.2-19.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-zeroconf 0.24.4-2.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-zipp 3.19.1-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-zope-event 4.2.0-20.el9.1 RHEA-2024:6126
Red Hat Openshift Ironic 4 python-zope-interface 5.4.0-1.el9 RHEA-2024:6126
Red Hat Openshift Ironic 4 python3-jinja2+i18n 3.1.5-1.el9 RHSA-2025:0656
Red Hat OpenStack 18 python-jinja2 +1 3.1.5-1.el9ost RHBA-2025:3029
Red Hat OpenStack 17 openstack-ansible-core 2.14.2-4.6.el9ost RHSA-2025:1861
Red Hat OpenShift 4 bpftool 7.3.0-427.50.2.el9_4 RHEA-2024:6126
Red Hat OpenShift 4 buildah +1 2:1.33.7-4.rhaos4.18.el9 RHEA-2024:6126
Red Hat OpenShift 4 conmon 3:2.1.12-7.rhaos4.18.el9 RHEA-2024:6126
Red Hat OpenShift 4 conmon-rs 0.6.6-0.rhaos4.18.el9.1 RHEA-2024:6126
Red Hat OpenShift 4 container-selinux 4:2.234.2-2.rhaos4.18.el9 RHEA-2024:6126
Red Hat OpenShift 4 containers-common 3:1-86.rhaos4.18.el9 RHEA-2024:6126
Red Hat OpenShift 4 cri-o 1.31.5-4.rhaos4.18.gitdad78d5.el8 RHEA-2024:6126
Red Hat OpenShift 4 cri-tools 1.31.1-3.el9 RHEA-2024:6126
Red Hat OpenShift 4 crun 1.19.1-2.rhaos4.18.el9 RHEA-2024:6126
Red Hat OpenShift 4 haproxy +1 2.8.10-1.rhaos4.17.el9 RHEA-2024:6126
Red Hat OpenShift 4 ignition +1 2.18.0-6.rhaos4.16.el9 RHEA-2024:6126
Red Hat OpenShift 4 libreswan 4.6-3.el9_0.3 RHEA-2024:6126
Red Hat OpenShift 4 openshift +1 4.18.0-202502051001.p0.gacb9630.assembly.stream.el8 RHEA-2024:6126
Red Hat OpenShift 4 openshift-ansible +1 4.18.0-202411201308.p0.g006fe4e.assembly.stream.el8 RHEA-2024:6126
Red Hat OpenShift 4 openshift-clients +1 4.18.0-202502032331.p0.ga50d4c0.assembly.stream.el8 RHEA-2024:6126
Red Hat OpenShift 4 openshift-prometheus-promu +1 0.16.0-20.gitf6c51c9.el9 RHEA-2024:6126
Red Hat OpenShift 4 openshift4-aws-iso 4.18.0-202502110932.p0.gd2acdd5.assembly.stream.el8 RHEA-2024:6126
Red Hat OpenShift 4 ose-aws-ecr-image-credential-provider 4.18.0-202411201308.p0.gc395190.assembly.stream.el8 RHEA-2024:6126
Red Hat OpenShift 4 ose-azure-acr-image-credential-provider 4.18.0-202412111238.p0.g9c24d76.assembly.stream.el8 RHEA-2024:6126
Red Hat OpenShift 4 ose-gcp-gcr-image-credential-provider 4.18.0-202501220601.p0.g6ea2356.assembly.stream.el8 RHEA-2024:6126
Red Hat OpenShift 4 ovn24.09 +3 24.09.2-14.el9fdp RHEA-2024:6126
Red Hat OpenShift 4 perf +80 5.14.0-427.50.2.el9_4 RHEA-2024:6126
Red Hat OpenShift 4 podman +6 4:4.9.4-13.rhaos4.16.el8 RHSA-2025:0830, RHEA-2024:6126
Red Hat OpenShift 4 runc 4:1.1.14-3.rhaos4.18.el9 RHEA-2024:6126
Red Hat OpenShift 4 skopeo +1 2:1.16.0-4.rhaos4.18.el9 RHEA-2024:6126
Red Hat OpenShift 4 toolbox 0.1.2-1.rhaos4.18.el9 RHEA-2024:6126
Red Hat Ansible Automation Platform Inside 2 python-jinja2 +1 3.1.5-1.el9ap RHSA-2025:0721
Red Hat Ansible Automation Platform Inside 2 python39-jinja2 +2 3.1.5-1.el8ap RHSA-2025:0777, RHSA-2025:0721
Red Hat Ansible Automation Platform Developer 2 python-jinja2 +1 3.1.5-1.el9ap RHSA-2025:0721
Red Hat Ansible Automation Platform Developer 2 python3.11-django 4.2.18-1.el8ap RHSA-2025:0777
Red Hat Ansible Automation Platform Developer 2 python39-jinja2 +2 3.1.5-1.el8ap RHSA-2025:0777, RHSA-2025:0721
Red Hat Ansible Automation Platform 2 automation-controller-venv-tower 4.5.17-1.el8ap RHSA-2025:0777, RHSA-2025:0721
Red Hat Ansible Automation Platform 2 python-jinja2 +1 3.1.5-1.el9ap RHSA-2025:0721
Red Hat Ansible Automation Platform 2 python3.11-django 4.2.18-1.el8ap RHSA-2025:0777
Red Hat Ansible Automation Platform 2 python39-jinja2 +2 3.1.5-1.el8ap RHSA-2025:0777, RHSA-2025:0721

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 9 fence-virt +12 4.10.0-76.el9_5.4.alma.1 ALSA-2025:0308
AlmaLinux 9 python3-jinja2 2.11.3-7.el9_5 ALSA-2025:0667
AlmaLinux 8 python3-jinja2 2.10.1-6.el8_10 ALSA-2025:0711

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 9 python-jinja2 2.11.3-7.el9_5 RLSA-2025:0667
Rocky Linux 8 python-jinja2 2.10.1-6.el8_10 RLSA-2025:0711

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP6 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SLES 15 SP5 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1, SUSE-SU-2025:0006-1
SLES 15 SP4 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1, SUSE-SU-2025:0006-1
SLES 15 SP3 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SLES 12 python-Jinja2 2.8-19.31.1 SUSE-SU-2025:0016-1
Show 18 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 3 python-Jinja2 3.1.2-150400.12.11.1 SUSE-SU-2025:0006-1
SLES for SAP 15 SP5 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1, SUSE-SU-2025:0006-1
SLES for SAP 15 SP4 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1, SUSE-SU-2025:0006-1
SLES for SAP 15 SP3 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SLE Micro 6.1 python-Jinja2 3.1.4-slfo.1.1_2.1 SUSE-SU-2025:20254-1
SLE Micro 6.0 python-Jinja2 3.1.2-7.1 SUSE-SU-2025:20117-1
SLE Micro 5.5 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SLE Micro 5.4 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SLE Micro 5.3 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SLE Micro 5.2 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SLE Micro 5.1 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SLE HPC 15 SP5 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1, SUSE-SU-2025:0006-1
SLE HPC 15 SP4 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1, SUSE-SU-2025:0006-1
SLE HPC 15 SP3 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SUSE Manager Server 4.3 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SUSE Manager Proxy 4.3 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1
SUSE Manager Client Tools 12 python-Jinja2 2.8-19.31.1 SUSE-SU-2025:0016-1
SUSE Enterprise Storage 7.1 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed oci-cli 3.54.1-1.1 openSUSE-SU-2025:14997-1
openSUSE Leap 15.6 python-Jinja2 3.1.2-150400.12.11.1 SUSE-SU-2025:0006-1
openSUSE Leap 15.5 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1, SUSE-SU-2025:0006-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
openSUSE Leap Micro 5.5 python-Jinja2 2.10.1-150000.3.18.1 SUSE-SU-2025:0029-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 py3-jinja2 3.1.5-r0 —
Alpine v3.23 py3-jinja2 3.1.5-r0 —
Alpine v3.22 py3-jinja2 3.1.5-r0 —
Alpine v3.21 py3-jinja2 3.1.5-r0 —
Alpine v3.20 py3-jinja2 3.1.5-r0 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 py3-jinja2 3.1.5-r0 —
Alpine v3.18 py3-jinja2 3.1.5-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 ansible-core +1 2.15.3-1.amzn2023.0.5 ALAS2023-2025-811
Amazon Linux 2023 python3-jinja2 2.11.3-1.amzn2023.0.5 ALAS2023-2025-810
Amazon Linux 2 python-jinja2 2.7.2-3.amzn2.0.3 ALAS2-2025-2734
Amazon Linux 2 python3-jinja2 2.7.2-4.amzn2.0.6 ALAS2-2025-2735

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 python-jinja2 3.1.2-2 —
Azure Linux 2 (CBL-Mariner) python-jinja2 3.0.3-5 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 9 fence-virt +47 4.10.0-76.el9_5.4 ELSA-2025-0308
Oracle Linux 9 python3-jinja2 2.11.3-7.el9_5 ELSA-2025-0667
Oracle Linux 8 python3-jinja2 2.10.1-6.el8_10 ELSA-2025-0711
Oracle Linux 7 python-jinja2 2.7.2-4.0.1.el7 ELSA-2025-1250

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling airflow 2.10.4-r2 —
Wolfi rolling checkov 3.2.432-r0 —
Wolfi rolling dask-gateway 2024.1.0-r13 —
Wolfi rolling emissary +6 3.9.1-r8 —
Wolfi rolling kserve +9 0.14.1-r0 —
Wolfi rolling kubeflow-jupyter-web-app +1 1.9.2-r3 —
Wolfi rolling kubeflow-pipelines-visualization-server 2.4.0-r0 —
Wolfi rolling py3-jinja2 3.1.5-r0 —
Wolfi rolling reflex 0.6.7-r0 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI jinja2 < 3.1.5 3.1.5 GHSA-q2x7-8rv6-6q7h

Advisories 50

References