JI
Product
jinja
by pallets · last CVE Dec 23, 2024
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add jinja to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-56201
8.8
0%
Dec 23
Jinja has a sandbox breakout through malicious filenames
Affected: >= 3.0.0, < 3.1.5
CVE-2024-56326
7.8
1%
Dec 23
Jinja has a sandbox breakout through indirect reference to format method
Affected: < 3.1.5
Showing 2