jinja vulnerabilities

2 known vulnerabilities in jinja from Pallets. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  jinja: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2025-27516Mar 5, 2025Pallets

  Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerabil

• 8.8 High severity

  jinja: Improper Neutralization of Escape, Meta, or Control Sequences

  CVE-2024-56201Dec 23, 2024Pallets

  Jinja is an extensible templating engine. In versions on the 3.x branch prior to 3.1.5, a bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox