Login Request a demo
JI
Product
Jinja
by Palletsprojects · last CVE Mar 5, 2025
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 5Medium 3Low 0
Severity
All severities8Critical0High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jinja to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-27516
8.8
1%
Mar 5
Jinja is an extensible templating engine
Affected: before 3.1.6
CVE-2024-56201
8.8
0%
Dec 23
Jinja has a sandbox breakout through malicious filenames
Affected: 3.0.0 before 3.1.5
CVE-2016-10745
8.6
4%
Apr 8
In Pallets Jinja before 2.8.1, str.format allows a sandbox escape
Affected: before 2.8.1
CVE-2019-10906
8.6
4%
Apr 7
In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape
Affected: before 2.10.1
CVE-2024-56326
7.8
1%
Dec 23
Jinja has a sandbox breakout through indirect reference to format method
Affected: before 3.1.5
CVE-2024-22195
6.1
1%
Jan 11
Jinja is an extensible templating engine
Affected: before 3.1.3
CVE-2024-34064
5.4
1%
May 6
Jinja is an extensible templating engine
Affected: before 3.1.4
CVE-2020-28493
5.3
4%
Feb 1
This affects the package jinja2 from 0.0.0 and before 2.11.3
Affected: before 2.11.3
Showing 8