JI
Product
Jinja
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add Jinja to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-27516 | 8.8 | Mar 5 | Jinja is an extensible templating engine Affected: before 3.1.6 |
| CVE-2024-56201 | 8.8 | Dec 23 | Jinja has a sandbox breakout through malicious filenames Affected: 3.0.0 before 3.1.5 |
| CVE-2016-10745 | 8.6 | Apr 8 | In Pallets Jinja before 2.8.1, str.format allows a sandbox escape Affected: before 2.8.1 |
| CVE-2019-10906 | 8.6 | Apr 7 | In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape Affected: before 2.10.1 |
| CVE-2024-56326 | 7.8 | Dec 23 | Jinja has a sandbox breakout through indirect reference to format method Affected: before 3.1.5 |
Showing 5