TI-2024-37287 CVE-2024-56326 · GHSA-q2x7-8rv6-6q7h
Jinja has a sandbox breakout through indirect reference to format method
Priority LOW 27
Jinja is an extensible templating engine.
RHSA-2025:1109
python-jinja2 security update
Released 2025-02-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v.8.4) python-jinja2-2.10.1-2.el8_4.1, python3-jinja2-2.10.1-2.el8_4.1
- Red Hat Enterprise Linux AppStream E4S (v.8.4) python-jinja2-2.10.1-2.el8_4.1, python3-jinja2-2.10.1-2.el8_4.1
- Red Hat Enterprise Linux AppStream TUS (v.8.4) python-jinja2-2.10.1-2.el8_4.1, python3-jinja2-2.10.1-2.el8_4.1