TI-2024-37287 CVE-2024-56326 · GHSA-q2x7-8rv6-6q7h
Jinja has a sandbox breakout through indirect reference to format method
Priority LOW 27
Jinja is an extensible templating engine.
RHSA-2025:0950
python-jinja2 security update
Released 2025-02-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.6) python-jinja2-2.10.1-4.el8_6.1, python3-jinja2-2.10.1-4.el8_6.1
- Red Hat Enterprise Linux AppStream E4S (v.8.6) python-jinja2-2.10.1-4.el8_6.1, python3-jinja2-2.10.1-4.el8_6.1
- Red Hat Enterprise Linux AppStream TUS (v.8.6) python-jinja2-2.10.1-4.el8_6.1, python3-jinja2-2.10.1-4.el8_6.1