TI-2025-20348 CVE-2025-27516 · GHSA-cpwx-vrp4-4pq7
Jinja sandbox breakout through attr filter selecting format method
Priority LOW 27
Jinja is an extensible templating engine.
RHSA-2025:3123
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2025-03-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-controller-venv-tower-4.5.20-1.el8ap, python39-jinja2-3.1.6-1.el8ap, python3x-jinja2-3.1.6-1.el8ap
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-controller-venv-tower-4.5.20-1.el9ap, python-jinja2-3.1.6-1.el9ap, python3-jinja2-3.1.6-1.el9ap