pallets/jinja Security Advisories | GitStock

medium2025-03-05

Jinja2 vulnerable to sandbox breakout through attr filter selecting format method

GHSA-cpwx-vrp4-4pq7 · CVE-2025-27516

medium2024-12-23

Jinja has a sandbox breakout through indirect reference to format method

GHSA-q2x7-8rv6-6q7h · CVE-2024-56326

medium2024-12-23

Jinja has a sandbox breakout through malicious filenames

GHSA-gmj6-6f8f-6699 · CVE-2024-56201

medium2024-05-06

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

GHSA-h75v-3vvj-5mfj · CVE-2024-34064

medium2024-01-11

Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

GHSA-h5c8-rqwp-cp95 · CVE-2024-22195

medium2021-03-19

Regular Expression Denial of Service (ReDoS) in Jinja2

GHSA-g3rq-g295-4j3m · CVE-2020-28493

high2019-04-10

Jinja2 sandbox escape via string formatting

GHSA-462w-v97r-4m45 · CVE-2019-10906

high2019-04-10

Jinja2 sandbox escape vulnerability

GHSA-hj2j-77xm-mc5v · CVE-2016-10745