JI
Product
jinjava
4
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 2Low 0
Watch
Add jinjava to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-12668 | 6.5 | Feb 19 | Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context Affected: before 2.5.4 |
| CVE-2018-18893 | 5.3 | Jan 3 | Jinjava before 2.4.6 does not block the getClass method, related to com/hubspot/jinjava/el/ext/JinjavaBeanELResolver.java Affected: before 2.4.6 |
Showing 2