Login Request a demo
JI
Product
jinjava
by HubSpot · last CVE Feb 4, 2026
4
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 2High 0Medium 2Low 0
Severity
All severities4Critical2High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add jinjava to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-59340
10.0
2%
Sep 17
jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates
Affected: before 2.8.1
CVE-2026-25526
9.8
1%
Feb 4
JinJava Bypass through ForTag leads to Arbitrary Java Execution
Affected: < 2.7.6; < 2.8.3
CVE-2020-12668
6.5
2%
Feb 19
Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context
Affected: before 2.5.4
CVE-2018-18893
5.3
2%
Jan 3
Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java
Affected: before 2.4.6
Showing 4