Dynaconf vulnerabilities
We track 1 vulnerability in Dynaconf products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Dynaconf vulnerabilities
- 8.1 High severity
dynaconf: Improper Neutralization of Special Elements used in an OS Command
dynaconf is a configuration management tool for Python. Prior to version 3.2.13, Dynaconf is vulnerable to Server-Side Template Injection (SSTI) due to unsafe template evaluation in the @Jinja resolver. When the jinja2 package is installed, Dynaconf evaluates